@rubytech/create-maxy-code 0.1.357 → 0.1.359

package/payload/platform/plugins/admin/mcp/dist/tools/capabilities-here.d.ts

@@ -1,3 +1,10 @@
+export type ClaudeAiConnectorState = "connected" | "needs-auth" | "unreachable";
+export interface ClaudeAiConnector {
+    /** The connector's claude.ai display name, prefix included, e.g.
+     *  "claude.ai Zoom for Claude" — the exact string `claude mcp login` expects. */
+    name: string;
+    state: ClaudeAiConnectorState;
+}
 export interface CapabilitiesHereInput {
     accountId: string;
     accountConfigPath: string;
@@ -5,6 +12,13 @@ export interface CapabilitiesHereInput {
     platformRoot: string;
     premiumPluginsRoot: string;
     claudeConfigDir: string;
+    /** Task 1160 — returns the raw combined output of `claude mcp list` run under
+     *  the brand config dir. Injected by the adapter (index.ts) so this function
+     *  stays a pure resolver and so the subprocess never runs in unit tests. When
+     *  omitted, no connectors are enumerated and nothing is spawned. The provider
+     *  itself must never throw; this resolver also guards it, degrading to an empty
+     *  connector list on any failure. */
+    listConnectorsRaw?: () => Promise<string>;
 }
 export interface CapabilitiesHereResult {
     accountId: string;
@@ -18,11 +32,13 @@ export interface CapabilitiesHereResult {
         name: string;
     }>;
     registeredAgentTypes: string[];
+    claudeAiConnectors: ClaudeAiConnector[];
     brand: {
         productName: string | null;
         shipsPremiumBundles: string[];
     };
     capturedAt: string;
 }
+export declare function parseClaudeAiConnectors(mcpListOutput: string): ClaudeAiConnector[];
 export declare function resolveCapabilitiesHere(input: CapabilitiesHereInput, nowIso: string): Promise<CapabilitiesHereResult>;
 //# sourceMappingURL=capabilities-here.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/tools/capabilities-here.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities-here.d.ts","sourceRoot":"","sources":["../../src/tools/capabilities-here.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,2BAA2B,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,mBAAmB,EAAE,MAAM,EAAE,CAAC;KAC/B,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;CACpB;AA0BD,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC,CAgDjC"}
+{"version":3,"file":"capabilities-here.d.ts","sourceRoot":"","sources":["../../src/tools/capabilities-here.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,sBAAsB,GAAG,WAAW,GAAG,YAAY,GAAG,aAAa,CAAC;AAEhF,MAAM,WAAW,iBAAiB;IAChC;qFACiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,sBAAsB,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;yCAKqC;IACrC,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,2BAA2B,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;IACxC,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,mBAAmB,EAAE,MAAM,EAAE,CAAC;KAC/B,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;CACpB;AASD,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAwBlF;AAuCD,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC,CAmDjC"}

package/payload/platform/plugins/admin/mcp/dist/tools/capabilities-here.js

@@ -1,6 +1,56 @@
 import { readFile } from "node:fs/promises";
 import { existsSync, readdirSync, statSync } from "node:fs";
 import { resolve, join } from "node:path";
+// Task 1160 — parse the claude.ai connectors out of `claude mcp list` output.
+// claude.ai connectors are account-synced (not stably enumerable on disk), so the
+// CLI's list is the canonical source of which connectors exist for this client and
+// their per-client auth state. Each connector row has the shape
+// `claude.ai <Display Name>: <url> - <status>`; non-claude.ai rows are ignored.
+// Status is matched on words, not glyphs, because the glyph varies (✔ vs ✓) across
+// CLI builds. Only names and status words are read — no token material. Pure.
+export function parseClaudeAiConnectors(mcpListOutput) {
+    const out = [];
+    for (const rawLine of mcpListOutput.split("\n")) {
+        const line = rawLine.trim();
+        if (!line.startsWith("claude.ai "))
+            continue;
+        const nameEnd = line.indexOf(": ");
+        const statusStart = line.lastIndexOf(" - ");
+        if (nameEnd < 0 || statusStart < 0 || statusStart < nameEnd)
+            continue;
+        const name = line.slice(0, nameEnd).trim();
+        // Skip a row with no display component (`claude.ai : ...`): the bare prefix is
+        // not a connector `claude mcp login` could target, so it must not be surfaced.
+        if (name === "claude.ai")
+            continue;
+        const status = line.slice(statusStart + 3);
+        let state;
+        // Match the whole word "connected" so "Disconnected" / "Failed to connect" do
+        // not read as connected; anything that is neither needs-auth nor connected is
+        // not usable, so it maps to unreachable.
+        if (/needs authentication/i.test(status))
+            state = "needs-auth";
+        else if (/\bconnected\b/i.test(status))
+            state = "connected";
+        else
+            state = "unreachable";
+        out.push({ name, state });
+    }
+    out.sort((a, b) => a.name.localeCompare(b.name));
+    return out;
+}
+async function resolveClaudeAiConnectors(listConnectorsRaw) {
+    if (!listConnectorsRaw)
+        return [];
+    try {
+        return parseClaudeAiConnectors(await listConnectorsRaw());
+    }
+    catch {
+        // The provider should never throw, but a connector-blind capabilities result
+        // is far better than a thrown discovery call. Degrade to empty.
+        return [];
+    }
+}
 function listSpecialistFiles(dir) {
     if (!existsSync(dir))
         return [];
@@ -52,6 +102,7 @@ export async function resolveCapabilitiesHere(input, nowIso) {
             installedPremiumSpecialists.push({ bundle, name });
     }
     const registeredAgentTypes = listAgentRegistry(resolve(input.claudeConfigDir, "agents"));
+    const claudeAiConnectors = await resolveClaudeAiConnectors(input.listConnectorsRaw);
     return {
         accountId: input.accountId,
         tier,
@@ -61,6 +112,7 @@ export async function resolveCapabilitiesHere(input, nowIso) {
         installedPlatformSpecialists,
         installedPremiumSpecialists,
         registeredAgentTypes,
+        claudeAiConnectors,
         brand: { productName, shipsPremiumBundles },
         capturedAt: nowIso,
     };

package/payload/platform/plugins/admin/mcp/dist/tools/capabilities-here.js.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities-here.js","sourceRoot":"","sources":["../../src/tools/capabilities-here.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAoC1C,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA4B,EAC5B,MAAc;IAEd,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAA4B,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;IAE9D,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QAC1D,CAAC,CAAE,OAAO,CAAC,cAA2B,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE;QACrD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,WAAW,GAAG,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAClE,CAAC,CAAE,KAAK,CAAC,mBAAgC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE;QACxD,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,sBAAsB,GAAG,OAAO,CACpC,KAAK,CAAC,YAAY,EAClB,WAAW,EACX,aAAa,EACb,QAAQ,CACT,CAAC;IACF,MAAM,4BAA4B,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;IAEjF,MAAM,2BAA2B,GAA4C,EAAE,CAAC;IAChF,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzC,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,2BAA2B,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,oBAAoB,GAAG,iBAAiB,CAC5C,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,CACzC,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI;QACJ,UAAU;QACV,WAAW;QACX,cAAc;QACd,4BAA4B;QAC5B,2BAA2B;QAC3B,oBAAoB;QACpB,KAAK,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC3C,UAAU,EAAE,MAAM;KACnB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"capabilities-here.js","sourceRoot":"","sources":["../../src/tools/capabilities-here.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAqD1C,8EAA8E;AAC9E,kFAAkF;AAClF,mFAAmF;AACnF,gEAAgE;AAChE,gFAAgF;AAChF,mFAAmF;AACnF,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CAAC,aAAqB;IAC3D,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,OAAO,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,OAAO;YAAE,SAAS;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,+EAA+E;QAC/E,+EAA+E;QAC/E,IAAI,IAAI,KAAK,WAAW;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,KAA6B,CAAC;QAClC,8EAA8E;QAC9E,8EAA8E;QAC9E,yCAAyC;QACzC,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,YAAY,CAAC;aAC1D,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,WAAW,CAAC;;YACvD,KAAK,GAAG,aAAa,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5B,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,iBAAsD;IAEtD,IAAI,CAAC,iBAAiB;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,uBAAuB,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,gEAAgE;QAChE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA4B,EAC5B,MAAc;IAEd,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAA4B,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;IAE9D,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QAC1D,CAAC,CAAE,OAAO,CAAC,cAA2B,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE;QACrD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,WAAW,GAAG,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAClE,CAAC,CAAE,KAAK,CAAC,mBAAgC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE;QACxD,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,sBAAsB,GAAG,OAAO,CACpC,KAAK,CAAC,YAAY,EAClB,WAAW,EACX,aAAa,EACb,QAAQ,CACT,CAAC;IACF,MAAM,4BAA4B,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;IAEjF,MAAM,2BAA2B,GAA4C,EAAE,CAAC;IAChF,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzC,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,2BAA2B,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,oBAAoB,GAAG,iBAAiB,CAC5C,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,CACzC,CAAC;IAEF,MAAM,kBAAkB,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAEpF,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI;QACJ,UAAU;QACV,WAAW;QACX,cAAc;QACd,4BAA4B;QAC5B,2BAA2B;QAC3B,oBAAoB;QACpB,kBAAkB;QAClB,KAAK,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC3C,UAAU,EAAE,MAAM;KACnB,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what Maxy ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:7cdf605d8c40fcc1e028ad43fe5411edcd9c422101aa9a3d6564a83798ad243a
+content-hash: sha256:6f90b00dd8971be316fca8e109765ec840a220d06f1cb4f1aabecefb9da17916
 brand: maxy-code
 product-name: Maxy
 ---
@@ -1123,6 +1123,12 @@ The most common cause is wrong nameservers on the domain. The domain must use Cl
 - 5 failed login attempts → 15-minute lockout — wait for expiry.
 - The remote password is set during Cloudflare Tunnel onboarding — the agent asks for one in chat and stores it deterministically. The browser form at `/__remote-auth/setup` remains available for resets on the local network.
 
+### Large `/data` upload fails with a connection error
+
+- Cloudflare proxies a request body of at most ~100 MB on the current plan. A single upload larger than that is cut at the edge before it reaches the server, so the browser sees a connection error rather than a clean size rejection.
+- The `/data` page handles this itself: files over 95 MB are split into ~48 MB parts and sent one at a time under the cap, and the server reassembles them. No plan change or dashboard action is needed for uploads up to the 2 GB app ceiling.
+- Raising the proxied body limit is a paid-plan change made on the Cloudflare dashboard, not something the agent does.
+
 ## What the agent does and does not do
 
 **Does:** invokes `cloudflared` directly via Bash, following `plugins/cloudflare/references/manual-setup.md` step by step; quotes click-paths from the reference files verbatim; verifies external reachability with `curl -I` and surfaces the response.
@@ -1709,6 +1715,56 @@ A 25-component design system (title slides, metric cards, quotes, comparison tab
 
 This is a frozen, vendored copy of the open-source Slides™ framework (MIT). It ships installed and available on every account; enable it per session like any other plugin if it is not already active.
 
+---
+# Connectors
+Source: https://docs.getmaxy.com/connectors.md
+
+# claude.ai connectors
+
+claude.ai connectors (Zoom, Dropbox, GitHub, Google Calendar, and the rest you add on claude.ai) work
+inside your admin chat once they are authorised for this Maxy client. This page explains why a
+connector you already added can still say it needs authentication, and how to fix it without leaving
+the chat.
+
+## Asking for a connector by name
+
+You can ask the agent to use a connector you added on claude.ai by name — "can we connect my Zoom
+account?", "save this to Dropbox", "check my Microsoft 365 calendar". The agent knows which connectors
+are loaded for this client and whether each one is ready or still needs the one-off authentication
+below, so it will reach for the connector rather than telling you it has no such integration. If a
+connector you added is not yet authenticated for this client, the agent offers you the authentication
+step straight away instead of dead-ending.
+
+## Why a connector can still need authentication
+
+A claude.ai connector is authorised per client, not per account. Approving a connector in the
+claude.ai web app authorises the web app only. Your Maxy admin chat is a separate client, so the first
+time it uses a connector that client has to be authorised too. This is a one-off step per connector.
+
+That is why some connectors work straight away while a newly added one does not. A connector you used
+before was already authorised for this client; a brand new one has only been approved in the web app.
+
+## How to authenticate one from the chat
+
+When the agent tries a connector that has not been authorised for this client, it will tell you the
+connector needs authentication and hand you a link. You do not need a terminal and you do not need to
+run anything yourself.
+
+1. The agent gives you an authorisation link.
+2. Open the link and approve the connector on claude.ai (sign in with the same account you use for
+   your connectors).
+3. Tell the agent you have approved it.
+4. The agent reconnects your chat session. Send your next message and the connector is ready to use.
+
+If a connector still reports that it needs authentication after you have approved it and the session
+has reconnected, that is unexpected. Tell your installer so they can look into it.
+
+## What this is not
+
+This is about Anthropic's claude.ai connectors, which authenticate per client. It is separate from the
+Maxy connector plugin, which registers ordinary REST APIs with credentials Maxy holds. The two are
+unrelated.
+
 ---
 # Telegram
 Source: https://docs.getmaxy.com/telegram-guide.md
@@ -2466,6 +2522,8 @@ either is a regression.
 
 **`/chat` empty-state greeting panel.** While the admin webchat has no conversation JSONL yet (`GET /api/webchat/session` → `projectDir:null`), `app/chat/page.tsx` renders a "What's up next, {givenName}?" greeting (given name = first whitespace token of the admin session's `userName`) above two read-only lists from `GET /api/webchat/greeting` (`server/routes/webchat-greeting.ts`, `requireAdminSession`-gated, `accountId`-scoped): the next 5 upcoming `:Event` rows (`eventStatus IN ['scheduled','due']`, future `COALESCE(nextRun, startDate)`, soonest first) and the outstanding `:Task` rows (`status IN ['pending','active','running']`, 5 shown + `+N more`). Read failure returns HTTP 200 `{ ok: false }` and the page shows the headline alone — the panel never blocks the composer. A third section, **Your specialists**, shows the account's installed roster — every `*.md` under `data/accounts/<accountId>/specialists/agents/`, core and `--`-prefixed premium files alike — shown by frontmatter `name` + `summary` (fallback `description`), empty dir → "No specialists installed". The roster read (`app/lib/claude-agent/specialist-roster.ts`) is isolated from the graph fallback: malformed files are skipped (`op=specialist-skipped file=<name> reason=<…>`), a whole-roster failure degrades to `specialists: []` inside the `ok: true` payload (`op=specialists-read-failed`). Logs: `[webchat:greeting] op=read account=<id8> events=<n> tasks=<n> specialists=<n> ms=<n>` / `op=read-failed reason=…`; client warns `[admin-ui] greeting-unavailable …`. The full webchat architecture lives in `.docs/admin-webchat-native-channel.md`.
 
+**`/chat` Conversations flyout + zero-sessions splash.** The admin `/chat` `HeaderMenu` carries a **Conversations** item (rendered only when `onOpenConversations` is wired, which scopes it to `/chat`) that opens an in-chat session-management pane (`app/chat/SessionList.tsx`) hosted by `chat/page.tsx` — distinct from, and sharing endpoints with, the `Sidebar` Sessions list (which stays hidden on narrow viewports). It enumerates the admin's own webchat sessions via `GET /api/admin/sidebar-sessions` (carries the per-row `live` marker and `archived` flag, install-wide), lists them newest-first with the live one marked and archived rows folded under a collapsible subsection, and offers per-row resume (`/chat?session=<id>`), rename, archive/unarchive, two-tap delete, an **End** control on the live row (`session-stop`), plus a New-session control (`session-rc-spawn`) and a copyable full id. When the canonical pointer is `known:false` (`canonical-empty`) and enumeration returns zero rows, the surface renders a splash (brand logo + New session) instead of a dead bootstrap thread; a freshly-spawned New session is `known:true`, so its greeting is preserved. Client breadcrumbs: `[chat-conversations] op=enumerate owned=<n>` and `op=action name=<open|rename|archive|delete|stop> sessionId=<id8>` (`op=action-failed … status=…` on a non-2xx). Detail lives in `.docs/admin-webchat-native-channel.md` ("Conversations flyout + zero-sessions splash").
+
 **`/chat` Claude-desktop transcript presentation.** The admin webchat keeps the shared `Transcript` shell (stream, follow-tail) but injects a /chat-only item renderer via the component's optional `renderItems` prop: `renderChatTimeline` in `app/chat/transcript-render.tsx`. Presentation: operator turns render as a right-aligned grey bubble showing the message text and, beneath it, a subtle always-visible time-of-day stamp (no label); delivered agent replies render as plain prose with the same time-of-day stamp beneath (the reply-document filename line stays, as prose); the stamp is HH:MM from the turn's `ts` (locale-formatted, right-aligned inside the operator bubble, left-aligned under agent prose), and a turn whose `ts` is null/unparseable shows no stamp, never an empty line — so only delivered operator and agent-reply turns are stamped, while tool runs, the collapsed "Thinking" block, and the agent-error banner stay time-free; a maximal consecutive run of `tool-call`/`tool-result` turns renders as one collapsed grey one-liner ("Used N tools ›") whose expansion shows every call and result payload — a lone call still gets the one-liner, and prose or a directive row ends a run. The WhatsApp reader (`/whatsapp`) omits the prop and keeps the default `renderTimeline`, so its rendering is unchanged; both presentations are test-pinned (`app/whatsapp/__tests__/Transcript-*.test.tsx`, `app/chat/__tests__/transcript-render.test.tsx`). **Day-divider:** both renderers insert a centered `.day-divider` row between two consecutive timeline items on different local calendar days (label `Today`/`Yesterday`, else `Sat 14 Jun 2026`), so a thread spanning midnight is never an ambiguous run of HH:MM; the first dated item gets a leading divider, a null/unparseable `ts` marks no boundary, dividers are computed over the filtered `visibleItems`, and in `/chat` a day crossover flushes any open tool/think run first so a collapsed run never spans it. Per-bubble HH:MM stamps are unchanged. Shared helpers `dayKey`/`dayLabel`/`itemTs`/`DayDivider` live in `app/whatsapp/Transcript.tsx`.
 
 **`/chat` live activity line.** While a turn is in flight the transcript tail shows one ephemeral `ChatActivity` line (mounted only while `busy`, admin/operator only). It tracks real activity, not a timer: while a `Task` subagent runs it shows that subagent's headline (`agentType · description`, prefixed `N agents ·` when ≥2 are concurrent), sourced from `agent-<hex>.meta.json` via named `activity` SSE events the admin reader pushes from the session's `subagents/` dir; with no subagent active it shows a neutral word that advances only on a real turn arrival. The line carries a turn-elapsed clock and flips to a `stalled` state once nothing has been written for 5 minutes (`now − lastEmitAt`), so the operator can tell a wedge from progress without SSH. It is never added to the persisted timeline. Detail and the `[webchat-activity]` observability live in [`admin-webchat-native-channel.md`](../../../.docs/admin-webchat-native-channel.md).
@@ -4179,6 +4237,8 @@ tail -200 ~/.maxy/logs/maxy-ui.log | rg '\[remote-auth\].*resolvedKind='
 
 **If a background task goes silent and the chat shows "A background task went silent — K of M completed":** Maxy's subagent stopped emitting progress for over 2 minutes. Tap "Continue" — the next turn resumes the prior session and reads a synthetic tool_result describing what completed before the pause, so the agent re-plans without losing the work it had done. Most stalls are upstream API latency rather than the subagent's approach failing — the resume-first path treats both correctly. Greppable post-deploy invariants: `[stall-recovery] kind=subagent_stalled … completed=<K>/? handoff=resume-first` followed by `[stall-resume] consumed kind=subagent_stalled toolUseId=<8>` on the next turn. If the button reads "Start over" instead, the parent's pending tool_use_id was not captured — the fallback path took over; the prior conversation is preserved as a `<recovery-context>` block in the cold-started session.
 
+**The stop button is stuck and the spinner never clears.** If the chat shows a stop button and a working spinner that never resolves, and the session dot is grey (not live), the agent process for that session was killed mid-turn (most often the device ran low on memory). There is no live turn to interrupt, so the old behaviour left you stranded. Now it self-heals: within a few seconds the spinner clears on its own and the composer shows "The agent stopped. Send a message to resume." Pressing stop clears it immediately. Either way, just send your next message — the session resumes from where it left off. Greppable post-deploy invariants: the manager logs `[rc-life] op=turn-aborted reason=child-exit-mid-turn` on the death and `[webchat-interrupt] op=dead-child-recovered` if you press stop; the browser console logs `[admin-ui] op=phantom-turn-cleared` (self-heal) or `[admin-ui] op=stop-dead-child` (stop press). If a session keeps dying mid-turn, the device is memory-constrained — that is a capacity concern, separate from this recovery.
+
 **Agent searches the filesystem after uploading a zip.** If you uploaded a zip and the agent burns several turns running `find` / `Glob` instead of unzipping, that is the symptom of the recovery-retry attachment-context regression (now closed by the recovery context preservation contract in `.docs/agents.md`). Greppable confirmation is the `[context-overflow-recovery] retry … attachmentsCarried=<n>` line in the conversation stream log. If you see `[context-overflow-recovery] WARN attachment-context-lost`, the regression has returned — surface to support.
 
 **Turn budget exhausted with a horizontal rule separating two assistant turns.** When Maxy reaches its turn budget and the doubled retry also runs out, the chat now shows a one-paragraph assistant message that opens with `error_max_turns turns=A→B` (initial budget → final budget) followed by the recovery copy: "I reached my turn budget of N before I could finish this request. Try sending a smaller or more focused request, or ask me to use higher effort." That message is persisted to the graph, so the next page-refresh still shows it. The thin horizontal rule labelled "Session restored after timeout." that appears above your following turn signals that the prior turn forced a cold SDK-session restart inside the same conversation (pool eviction) — the agent's response after the rule is from a fresh SDK session even though the conversation thread is unchanged. Greppable post-deploy invariants: `[context-overflow-recovery] exhausted cause=max-turns-interrupted` count equals `[admin-persist] writer=persistMessageExhaust outcome=ok` count for the same sessionId window, and one `[session-store] storeAgentSessionId` line marks the cold-restart that drove the on-screen rule.

package/payload/platform/plugins/cloudflare/PLUGIN.md

@@ -25,7 +25,7 @@ Each installation has its own Cloudflare account. Two auth paths serve two opera
 
 ## Operator-facing surface
 
-The plugin registers no agent-facing MCP tools. Every Cloudflare operation is the agent invoking `cloudflared` or `wrangler` directly via Bash, or calling the Cloudflare API with a reused per-scope narrow token, with stdout/stderr streamed verbatim into the PTY chat (secrets redacted). The OAuth URL printed by `cloudflared tunnel login` is linkified by the native PTY; the operator clicks it in their own browser. There is no shell-script wrapper, no orchestrator state machine, no MCP-tool surface.
+The plugin registers no agent-facing MCP tools. Every Cloudflare operation is the agent invoking `cloudflared` or `wrangler` directly via Bash, or calling the Cloudflare API with a reused per-scope narrow token, with stdout/stderr streamed verbatim into the PTY chat (secrets redacted). The OAuth URL printed by `cloudflared tunnel login` is linkified by the native PTY; the operator clicks it in their own browser. The one shell helper is [bin/cf-token.sh](bin/cf-token.sh), a deterministic per-scope token resolver that faithfully relays the Cloudflare token API (it invents no flags and drives no dashboard); there is no wrapper around `cloudflared` or `wrangler`, no orchestrator state machine, no MCP-tool surface.
 
 ### Skills
 
@@ -48,6 +48,12 @@ The plugin registers no agent-facing MCP tools. Every Cloudflare operation is th
 
 The agent loads these references on demand via `plugin-read` as the conversation requires. They are not auto-injected into the system prompt.
 
+### Helper
+
+| Helper | Purpose |
+|---|---|
+| [bin/cf-token.sh](bin/cf-token.sh) | Deterministic per-scope token resolver. `bash bin/cf-token.sh <scope> <secrets-file>` (scope: `pages`, `d1`, `dns`, `access`) reads the master's `cfat_`/`cfut_` prefix, routes verify/`permission_groups`/mint to the matching endpoint family, reuses a persisted token or mints once if absent (no expiry), verifies through the transient post-mint window, persists to the secrets file, and prints only the secrets key name on stdout (never a token value). It removes the endpoint-routing decision from the agent, which is what the false-negative `Invalid API Token` / `9109` failures turned on. curl + jq only; exit-code gated. |
+
 ### Success contract
 
 The setup-done claim only fires when `curl -I https://<hostname>` issued from outside the local network returns `HTTP/2 200` (or `HTTP/1.1 200 OK`) and the response is surfaced verbatim in chat. No state file, no service-active claim, no `cloudflared` exit code substitutes for the live HTTP response. When the curl returns anything else, the agent diagnoses with `cloudflared tunnel info <tunnelId>` and `systemctl --user status cloudflared-${BRAND}.service`, cites the relevant step in `references/reset-guide.md`, and stops.

package/payload/platform/plugins/cloudflare/bin/__tests__/cf-token.test.sh

@@ -0,0 +1,195 @@
+#!/usr/bin/env bash
+# Regression test for cf-token.sh. Stubs curl via a PATH shim backed by a state
+# file so mint -> verify sequencing and the post-mint 10000 window are simulated
+# offline. No live Cloudflare account is touched.
+#
+# Covers:
+#   1. cfat_ master mints pages-d1, routes verify/perm/mint to /accounts/...
+#   2. cfut_ master routes to /user/... and never to /accounts/...
+#   3. an already-persisted canonical key is reused with no mint call
+#   4. a legacy key (CF_PAGES_TOKEN) is reused and reported as the used key
+#   5. the post-mint 10000 window is retried, then verify passes
+#   6. access poison duplicate-id: first id 10000 on functional read -> alt id
+#   7. an unrecognised master prefix fails closed
+#   8. a real failure (non-transient verify code) exits non-zero, code surfaced
+#   9/10. no token value ever reaches stdout/stderr; stdout is exactly the key
+set -u
+
+HELPER="$(cd "$(dirname "$0")/.." && pwd)/cf-token.sh"
+[ -x "$HELPER" ] || { echo "FAIL: $HELPER not executable" >&2; exit 1; }
+
+PASS=0; FAIL=0
+SECRET_VALUE="cfat_minted_SECRET_do_not_leak_0123456789"   # fake minted token value
+
+ok()   { echo "PASS: $1"; PASS=$((PASS+1)); }
+bad()  { echo "FAIL: $1" >&2; FAIL=$((FAIL+1)); }
+
+# Build a scratch sandbox: a fake-curl dir on PATH + an account-style secrets file.
+# $1 = master token value (its prefix selects cfat_/cfut_ routing).
+setup() {
+  SANDBOX=$(mktemp -d)
+  BIN="$SANDBOX/bin"; mkdir -p "$BIN"
+  SDIR="$SANDBOX/acme-code/data/accounts/acc123/secrets"; mkdir -p "$SDIR"
+  SECRETS="$SDIR/cloudflare.env"
+  ( umask 077; printf 'CLOUDFLARE_API_TOKEN=%s\nCLOUDFLARE_ACCOUNT_ID=%s\n' "$1" "acc123" > "$SECRETS" )
+  : > "$SANDBOX/curl.log"
+  install_default_curl
+  PATH="$BIN:$PATH"; export PATH
+}
+teardown() { rm -rf "$SANDBOX"; }
+
+# Default fake curl: a healthy account with all permission groups; mint -> value;
+# verify -> active; functional access read -> ok.
+install_default_curl() {
+  cat > "$BIN/curl" <<CURL
+#!/usr/bin/env bash
+SB="\$(cd "\$(dirname "\$0")/.." && pwd)"
+echo "\$@" >> "\$SB/curl.log"
+url=""; for a in "\$@"; do case "\$a" in https://*) url="\$a";; esac; done
+case "\$url" in
+  *"/tokens/permission_groups"*)
+    echo '{"success":true,"result":[{"id":"pg_pages","name":"Cloudflare Pages Write"},{"id":"pg_d1","name":"D1 Write"},{"id":"pg_dns","name":"DNS Write"},{"id":"pg_acc1","name":"Access: Apps and Policies Write"},{"id":"pg_acc2","name":"Access: Apps and Policies Write"}]}'
+    ;;
+  *"/tokens/verify"*) echo '{"success":true,"result":{"status":"active"}}';;
+  *"/tokens"*)        echo '{"success":true,"result":{"id":"tok1","value":"'"$SECRET_VALUE"'"}}';;
+  *"/access/apps"*)   echo '{"success":true,"result":[]}';;
+  *) echo '{"success":false,"errors":[{"code":9999,"message":"unmapped"}]}';;
+esac
+CURL
+  chmod +x "$BIN/curl"
+}
+
+# Run the helper. $1 name $2 scope $3 expected_exit. Sets OUT/ERR/RC.
+run() {
+  local name="$1" scope="$2" exp="$3" of ef
+  of=$(mktemp); ef=$(mktemp)
+  CF_BACKOFF_SECONDS=0 bash "$HELPER" "$scope" "$SECRETS" >"$of" 2>"$ef"
+  RC=$?
+  OUT=$(cat "$of"); ERR=$(cat "$ef"); rm -f "$of" "$ef"
+  [ "$RC" -eq "$exp" ] && ok "$name (exit=$RC)" || { bad "$name (exit=$RC want $exp)"; echo "  stderr: $ERR" >&2; }
+}
+
+no_leak() {  # assert no fake token value appears in OUT or ERR
+  if printf '%s%s' "$OUT" "$ERR" | grep -qE "SECRET|BADtoken|GOODtoken"; then bad "$1 leaked a token value"
+  else ok "$1 no token leak"; fi
+}
+
+# ---------------------------------------------------------------------------
+# 1. cfat_ master mints pages-d1, routes to /accounts/...
+setup "cfat_master_abc"
+run "cfat pages mint" pages 0
+grep -q "/accounts/acc123/tokens" "$SANDBOX/curl.log" && ok "cfat routes accounts" || bad "cfat routing"
+[ "$OUT" = "CF_PAGES_D1_TOKEN" ] && ok "stdout is canonical key" || bad "stdout='$OUT'"
+grep -q "^CF_PAGES_D1_TOKEN=" "$SECRETS" && ok "persisted canonical key" || bad "not persisted"
+echo "$ERR" | grep -q "op=resolve scope=pages master=cfat action=mint result=active code=0" && ok "mint lifeline verbatim" || bad "lifeline: $ERR"
+no_leak "cfat mint"
+teardown
+
+# 2. cfut_ master routes to /user/... only
+setup "cfut_master_xyz"
+run "cfut pages mint" pages 0
+grep -q "/user/tokens" "$SANDBOX/curl.log" && ok "cfut routes user" || bad "cfut routing"
+grep -q "/accounts/acc123/tokens" "$SANDBOX/curl.log" && bad "cfut hit account endpoint" || ok "no account route for cfut"
+echo "$ERR" | grep -q "master=cfut" && ok "cfut lifeline tag" || bad "lifeline tag: $ERR"
+teardown
+
+# 3. reuse: pre-persist canonical key -> no mint POST
+setup "cfat_master_abc"
+( umask 077; printf 'CF_PAGES_D1_TOKEN=%s\n' "cfat_already_here" >> "$SECRETS" )
+run "reuse no mint" pages 0
+grep -q -- "-X POST" "$SANDBOX/curl.log" && bad "reuse path minted" || ok "reuse no mint call"
+echo "$ERR" | grep -q "action=reuse result=active" && ok "reuse lifeline" || bad "reuse lifeline: $ERR"
+[ "$OUT" = "CF_PAGES_D1_TOKEN" ] && ok "reuse reports canonical key" || bad "reuse out='$OUT'"
+teardown
+
+# 4. legacy key reuse: CF_PAGES_TOKEN present -> reused, reported as legacy key
+setup "cfat_master_abc"
+( umask 077; printf 'CF_PAGES_TOKEN=%s\n' "cfat_legacy_here" >> "$SECRETS" )
+run "legacy reuse" pages 0
+grep -q -- "-X POST" "$SANDBOX/curl.log" && bad "legacy reuse minted" || ok "legacy reuse no mint"
+[ "$OUT" = "CF_PAGES_TOKEN" ] && ok "reports legacy key" || bad "legacy out='$OUT'"
+teardown
+
+# 5. post-mint 10000 window then active
+setup "cfat_master_abc"
+cat > "$BIN/curl" <<'CURL'
+#!/usr/bin/env bash
+SB="$(cd "$(dirname "$0")/.." && pwd)"
+echo "$@" >> "$SB/curl.log"
+url=""; for a in "$@"; do case "$a" in https://*) url="$a";; esac; done
+case "$url" in
+  *"/permission_groups"*) echo '{"success":true,"result":[{"id":"pg_pages","name":"Pages Write"},{"id":"pg_d1","name":"D1 Write"}]}';;
+  *"/tokens/verify"*)
+     n=$(cat "$SB/vcount" 2>/dev/null || echo 0); n=$((n+1)); echo "$n" > "$SB/vcount"
+     if [ "$n" -ge 3 ]; then echo '{"success":true,"result":{"status":"active"}}'
+     else echo '{"success":false,"errors":[{"code":10000,"message":"Authentication error"}]}'; fi;;
+  *"/tokens"*) echo '{"success":true,"result":{"value":"cfat_minted_SECRET_do_not_leak_0123456789"}}';;
+  *) echo '{"success":false,"errors":[{"code":9999}]}';;
+esac
+CURL
+chmod +x "$BIN/curl"; : > "$SANDBOX/vcount"
+run "10000 retry then active" pages 0
+no_leak "10000 retry"
+teardown
+
+# 6. access poison id: first candidate's functional read returns 10000, second is fine
+setup "cfat_master_abc"
+cat > "$BIN/curl" <<'CURL'
+#!/usr/bin/env bash
+SB="$(cd "$(dirname "$0")/.." && pwd)"
+echo "$@" >> "$SB/curl.log"
+url=""; data=""; hdr=""; prev=""
+for a in "$@"; do
+  case "$a" in https://*) url="$a";; esac
+  [ "$prev" = "--data" ] && data="$a"
+  [ "$prev" = "-H" ] && hdr="$hdr $a"
+  prev="$a"
+done
+case "$url" in
+  *"/permission_groups"*) echo '{"success":true,"result":[{"id":"acc_bad","name":"Access: Apps and Policies Write"},{"id":"acc_good","name":"Access: Apps and Policies Write"}]}';;
+  *"/tokens/verify"*) echo '{"success":true,"result":{"status":"active"}}';;
+  *"/tokens"*)
+     case "$data" in
+       *acc_bad*)  echo '{"success":true,"result":{"value":"cfat_BADtoken_0"}}';;
+       *acc_good*) echo '{"success":true,"result":{"value":"cfat_GOODtoken_1"}}';;
+       *) echo '{"success":true,"result":{"value":"cfat_x"}}';; esac;;
+  *"/access/apps"*)
+     case "$hdr" in *BADtoken*) echo '{"success":false,"errors":[{"code":10000}]}';;
+                    *) echo '{"success":true,"result":[]}';; esac;;
+  *) echo '{"success":false,"errors":[{"code":9999}]}';;
+esac
+CURL
+chmod +x "$BIN/curl"
+run "access poison retried to good id" access 0
+grep -q "acc_good" "$SANDBOX/curl.log" && ok "minted with good id" || bad "never tried good id"
+no_leak "access poison"
+teardown
+
+# 7. unknown prefix -> fail closed
+setup "v1.0-legacyapikeystyle"
+run "unknown prefix fail closed" pages 1
+grep -q -- "-X POST" "$SANDBOX/curl.log" && bad "unknown prefix still minted" || ok "unknown prefix no mint"
+teardown
+
+# 8. real failure: verify returns a non-transient code -> non-zero, surfaced, masked
+setup "cfat_master_abc"
+cat > "$BIN/curl" <<'CURL'
+#!/usr/bin/env bash
+SB="$(cd "$(dirname "$0")/.." && pwd)"
+echo "$@" >> "$SB/curl.log"
+url=""; for a in "$@"; do case "$a" in https://*) url="$a";; esac; done
+case "$url" in
+  *"/permission_groups"*) echo '{"success":true,"result":[{"id":"pg_pages","name":"Pages Write"},{"id":"pg_d1","name":"D1 Write"}]}';;
+  *"/tokens/verify"*) echo '{"success":false,"errors":[{"code":1001,"message":"bad"}]}';;
+  *"/tokens"*) echo '{"success":true,"result":{"value":"cfat_minted_SECRET_do_not_leak_0123456789"}}';;
+  *) echo '{"success":false,"errors":[{"code":9999}]}';;
+esac
+CURL
+chmod +x "$BIN/curl"
+run "real failure non-zero" pages 1
+echo "$ERR" | grep -q "code=1001" && ok "failure code surfaced" || bad "code not surfaced: $ERR"
+no_leak "real failure"
+teardown
+
+echo "----"; echo "PASS=$PASS FAIL=$FAIL"
+[ "$FAIL" -eq 0 ]

package/payload/platform/plugins/cloudflare/bin/cf-token.sh

@@ -0,0 +1,157 @@
+#!/usr/bin/env bash
+# cf-token.sh - deterministic Cloudflare per-scope token resolver.
+#
+# Owns the cfat_/cfut_ prefix decision and the mint-or-reuse state machine that
+# api.md "Token type - route endpoints by prefix" and "Provisioning and reusing
+# a stable per-scope token" describe, so the agent never guesses a token
+# endpoint. curl + jq only (the cloudflare skill binds API calls to curl/jq).
+#
+# Usage: cf-token.sh <scope> <secrets-file>
+#   scope in {pages, d1, dns, access}
+# Output: stdout = the secrets key name holding the active token (never a value).
+#         stderr = a [cf-token] lifeline and, on failure, the endpoint + code.
+# Exit:   0 when the scope token is active/reused and persisted; non-zero else.
+set -u
+
+API="https://api.cloudflare.com/client/v4"
+BACKOFF="${CF_BACKOFF_SECONDS:-3}"
+RETRIES="${CF_VERIFY_RETRIES:-10}"
+
+die() { echo "[cf-token] error: $*" >&2; exit 1; }
+
+scope="${1:-}"; secrets="${2:-}"
+case "$scope" in pages|d1|dns|access) ;; *) die "unknown scope '${scope}'; use pages|d1|dns|access";; esac
+[ -n "$secrets" ] && [ -r "$secrets" ] || die "secrets file not readable: '${secrets}'"
+
+# Load credentials (api.md load-credentials pre-flight). :? aborts if unset/empty,
+# so a credential-unloaded call can never reach the API.
+set -a; . "$secrets"; set +a
+: "${CLOUDFLARE_API_TOKEN:?credentials not loaded - source the secrets file before any call}"
+: "${CLOUDFLARE_ACCOUNT_ID:?account id not loaded - source the secrets file before any call}"
+ACC="$CLOUDFLARE_ACCOUNT_ID"
+
+# Brand for the minted token name: CF_TOKEN_BRAND overrides; else the <brand>-code
+# path segment of the secrets file; else fail closed (no guessed name).
+brand="${CF_TOKEN_BRAND:-}"
+if [ -z "$brand" ]; then
+  case "$secrets" in
+    */*-code/*) brand="$(printf '%s\n' "$secrets" | tr '/' '\n' | grep -E -- '-code$' | head -1)";;
+  esac
+fi
+[ -n "$brand" ] || die "cannot derive brand from path; set CF_TOKEN_BRAND"
+
+# Scope table - resolved by case, never inferred.
+legacy=""
+case "$scope" in
+  pages|d1) suffix="pages-d1"; key="CF_PAGES_D1_TOKEN"; legacy="CF_PAGES_TOKEN"
+            # per-group regexes separated by ';' (each may use '|' internally)
+            regexes="pages.*(write|edit);d1.*(write|edit)"; res='{"com.cloudflare.api.account.'"$ACC"'":"*"}';;
+  dns)      suffix="dns"; key="CF_DNS_TOKEN"
+            regexes="dns.*(write|edit)"; res='{"com.cloudflare.api.account.zone.*":"*"}';;
+  access)   suffix="access"; key="CF_ACCESS_TOKEN"
+            regexes="access.*apps.*polic.*(write|edit)"; res='{"com.cloudflare.api.account.'"$ACC"'":"*"}';;
+esac
+name="${brand}-${suffix}"
+
+read_key() { grep -m1 "^$1=" "$secrets" 2>/dev/null | cut -d= -f2-; }
+prefix_tag() { case "$CLOUDFLARE_API_TOKEN" in cfat_*) echo cfat;; cfut_*) echo cfut;; *) echo other;; esac; }
+
+# --- Reuse path: a persisted token is already active (api.md). No verify, no mint.
+existing="$(read_key "$key")"; used_key="$key"
+if [ -z "$existing" ] && [ -n "$legacy" ]; then
+  existing="$(read_key "$legacy")"; [ -n "$existing" ] && used_key="$legacy"
+fi
+if [ -n "$existing" ]; then
+  echo "[cf-token] op=resolve scope=${scope} master=$(prefix_tag) action=reuse result=active code=0" >&2
+  printf '%s\n' "$used_key"; exit 0
+fi
+
+# --- Mint path: route strictly by master prefix. Any other prefix fails closed.
+case "$CLOUDFLARE_API_TOKEN" in
+  cfat_*) base="$API/accounts/$ACC"; mtag=cfat;;
+  cfut_*) base="$API/user"; mtag=cfut;;
+  *) echo "[cf-token] op=resolve scope=${scope} master=other action=mint result=error code=0" >&2
+     die "unrecognised master token prefix (not cfat_/cfut_); refusing to guess an endpoint";;
+esac
+
+api_get() { curl -sS -H "Authorization: Bearer ${CLOUDFLARE_API_TOKEN}" "$1"; }
+
+# Resolve permission-group id(s) by name regex (case-insensitive).
+pg_json="$(api_get "${base}/tokens/permission_groups")"
+echo "$pg_json" | jq -e '.success==true' >/dev/null 2>&1 || {
+  code=$(echo "$pg_json" | jq -r '.errors[0].code // "?"')
+  echo "[cf-token] op=resolve scope=${scope} master=${mtag} action=mint result=error code=${code}" >&2
+  die "permission_groups failed at ${base}/tokens/permission_groups code=${code}"
+}
+
+collect_ids() { echo "$pg_json" | jq -r --arg re "$1" '.result[] | select(.name|test($re;"i")) | .id'; }
+
+mint_with() { # $1 = json permission_groups array -> echoes minted token value or empty
+  local body
+  body=$(jq -cn --arg n "$name" --argjson res "$res" --argjson pg "$1" \
+    '{name:$n, policies:[{effect:"allow", resources:$res, permission_groups:$pg}]}')
+  curl -sS -X POST -H "Authorization: Bearer ${CLOUDFLARE_API_TOKEN}" \
+    -H "Content-Type: application/json" "${base}/tokens" --data "$body" \
+    | jq -r '.result.value // empty'
+}
+
+verify_token() { # $1 token -> echoes "active" or the failing code; retries transient 10000
+  local i s
+  s=""
+  for i in $(seq 1 "$RETRIES"); do
+    s=$(curl -sS -H "Authorization: Bearer $1" "${base}/tokens/verify" \
+          | jq -r '.result.status // (.errors[0].code | tostring) // "error"')
+    [ "$s" = "active" ] && { echo active; return 0; }
+    [ "$s" = "10000" ] && { sleep "$BACKOFF"; continue; }
+    echo "$s"; return 1
+  done
+  echo "$s"; return 1
+}
+
+finish() { # $1 token value -> persist under canonical key, report, exit 0
+  ( umask 077; printf '%s=%s\n' "$key" "$1" >> "$secrets" )
+  echo "[cf-token] op=resolve scope=${scope} master=${mtag} action=mint result=active code=0" >&2
+  printf '%s\n' "$key"; exit 0
+}
+
+if [ "$scope" = "access" ]; then
+  # The "Access: Apps and Policies Write" group can resolve to more than one id;
+  # the wrong one yields a token that returns 10000 on every call, reads included.
+  # Try each candidate, mint+verify, then a functional read; keep the one that works.
+  candidates="$(collect_ids "$regexes")"
+  [ -n "$candidates" ] || {
+    echo "[cf-token] op=resolve scope=access master=${mtag} action=mint result=error code=0" >&2
+    die "no permission group matched /${regexes}/"; }
+  for cid in $candidates; do
+    tok=$(mint_with "$(jq -cn --arg id "$cid" '[{id:$id}]')")
+    [ -n "$tok" ] || continue
+    st=$(verify_token "$tok"); [ "$st" = "active" ] || continue
+    fn=$(curl -sS -H "Authorization: Bearer $tok" "${base}/access/apps" \
+           | jq -r '.success // (.errors[0].code|tostring)')
+    [ "$fn" = "true" ] && finish "$tok"
+    # else poison id - try the next candidate
+  done
+  echo "[cf-token] op=resolve scope=access master=${mtag} action=mint result=error code=10000" >&2
+  die "every Access permission-group candidate returned 10000 on a functional read (poison id)"
+else
+  pg_array='[]'
+  OLDIFS=$IFS; IFS=';'
+  for rx in $regexes; do
+    id=$(collect_ids "$rx" | head -1)
+    [ -n "$id" ] || {
+      IFS=$OLDIFS
+      echo "[cf-token] op=resolve scope=${scope} master=${mtag} action=mint result=error code=0" >&2
+      die "no permission group matched /${rx}/"; }
+    pg_array=$(echo "$pg_array" | jq -c --arg id "$id" '. + [{id:$id}]')
+  done
+  IFS=$OLDIFS
+  tok=$(mint_with "$pg_array")
+  [ -n "$tok" ] || {
+    echo "[cf-token] op=resolve scope=${scope} master=${mtag} action=mint result=error code=0" >&2
+    die "mint returned no token value at ${base}/tokens"; }
+  st=$(verify_token "$tok")
+  [ "$st" = "active" ] || {
+    echo "[cf-token] op=resolve scope=${scope} master=${mtag} action=mint result=error code=${st}" >&2
+    die "verify failed code=${st} at ${base}/tokens/verify"; }
+  finish "$tok"
+fi