@rubytech/create-maxy 1.0.0

package/payload/platform/plugins/cloudflare/mcp/dist/index.js

@@ -0,0 +1,174 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { join } from "node:path";
+import * as cloudflared from "./lib/cloudflared.js";
+const server = new McpServer({
+    name: "cloudflare",
+    version: "0.1.0",
+});
+// ===================================================================
+// Cloudflare Tunnel tools
+// ===================================================================
+server.tool("tunnel-status", "Full Cloudflare Tunnel status: installed, version, authenticated, running, domain, URLs.", {
+    domain: z.string().optional().describe("The bare domain (e.g. 'maxy.bot'). If omitted, domain info is excluded."),
+}, async ({ domain }) => {
+    try {
+        const status = cloudflared.getStatus(domain);
+        return {
+            content: [{ type: "text", text: JSON.stringify(status, null, 2) }],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{ type: "text", text: `Failed: ${err instanceof Error ? err.message : String(err)}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("tunnel-install", "Install the cloudflared binary if not already present.", {}, async () => {
+    const { execFileSync } = await import("node:child_process");
+    if (cloudflared.isInstalled()) {
+        const v = cloudflared.version();
+        return {
+            content: [{ type: "text", text: `cloudflared is already installed (v${v}).` }],
+        };
+    }
+    try {
+        const arch = process.arch === "arm64" ? "arm64" : "amd64";
+        const debUrl = `https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-${arch}.deb`;
+        execFileSync("curl", ["-fsSL", debUrl, "-o", "/tmp/cloudflared.deb"], { timeout: 60000 });
+        execFileSync("sudo", ["dpkg", "-i", "/tmp/cloudflared.deb"], { timeout: 30000 });
+        execFileSync("rm", ["-f", "/tmp/cloudflared.deb"]);
+        return {
+            content: [{ type: "text", text: `cloudflared installed (v${cloudflared.version()}).` }],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{ type: "text", text: `Installation failed: ${err instanceof Error ? err.message : String(err)}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("tunnel-login", "Start Cloudflare authentication. Returns a URL (and QR code data) that the user must visit to authorise this device. On a headless device, scan the QR code with your phone.", {}, async () => {
+    if (!cloudflared.isInstalled()) {
+        return {
+            content: [{ type: "text", text: "cloudflared is not installed. Run tunnel-install first." }],
+            isError: true,
+        };
+    }
+    if (cloudflared.isAuthenticated()) {
+        return {
+            content: [{ type: "text", text: "Already authenticated with Cloudflare." }],
+        };
+    }
+    try {
+        const login = cloudflared.startLogin();
+        // Wait up to 15 seconds for the auth URL to appear in output
+        const startTime = Date.now();
+        while (!login.authUrl && Date.now() - startTime < 15000) {
+            await new Promise((r) => setTimeout(r, 500));
+        }
+        if (!login.authUrl) {
+            login.process.kill();
+            return {
+                content: [{ type: "text", text: "Timed out waiting for Cloudflare auth URL. Check cloudflared logs." }],
+                isError: true,
+            };
+        }
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Cloudflare authentication started.\n\nVisit this URL to authorise this device:\n${login.authUrl}\n\nOn a headless device, use qr-generate to create a QR code for this URL, then scan it with your phone.\n\nWaiting for authentication to complete...`,
+                },
+            ],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{ type: "text", text: `Login failed: ${err instanceof Error ? err.message : String(err)}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("tunnel-create", "Create a Cloudflare Tunnel and route DNS for admin.{domain} and public.{domain}.", {
+    domain: z.string().describe("The bare domain (e.g. 'maxy.bot'). Subdomains admin. and public. are created automatically."),
+    tunnelName: z.string().optional().describe("Human-readable tunnel name (default: derived from domain)"),
+}, async ({ domain, tunnelName }) => {
+    if (!cloudflared.isInstalled()) {
+        return {
+            content: [{ type: "text", text: "cloudflared is not installed. Run tunnel-install first." }],
+            isError: true,
+        };
+    }
+    if (!cloudflared.isAuthenticated()) {
+        return {
+            content: [{ type: "text", text: "Not authenticated with Cloudflare. Run tunnel-login first." }],
+            isError: true,
+        };
+    }
+    try {
+        const name = tunnelName ?? domain.replace(/\./g, "-");
+        const result = cloudflared.createTunnel(name);
+        cloudflared.routeDns(result.tunnelId, `admin.${domain}`);
+        cloudflared.routeDns(result.tunnelId, `public.${domain}`);
+        const configPath = cloudflared.writeConfig(result.tunnelId, result.credentialsFile, domain, 19200);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Tunnel created.\n\n  ID: ${result.tunnelId}\n  Name: ${result.tunnelName}\n  DNS: admin.${domain} → tunnel\n  DNS: public.${domain} → tunnel\n  Config: ${configPath}\n\nUse tunnel-enable to start the tunnel.`,
+                },
+            ],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{ type: "text", text: `Create failed: ${err instanceof Error ? err.message : String(err)}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("tunnel-enable", "Start the Cloudflare Tunnel process. The tunnel must be created first via tunnel-create.", {
+    tunnelId: z.string().describe("Tunnel UUID from tunnel-create"),
+    domain: z.string().describe("The bare domain (e.g. 'maxy.bot')"),
+}, async ({ tunnelId, domain }) => {
+    try {
+        const credentialsFile = join(process.env.HOME ?? "/root", `.cloudflared/${tunnelId}.json`);
+        const configPath = cloudflared.writeConfig(tunnelId, credentialsFile, domain, 19200);
+        cloudflared.startTunnel(configPath);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Tunnel started.\n\n  Admin: https://admin.${domain}\n  Public: https://public.${domain}`,
+                },
+            ],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{ type: "text", text: `Enable failed: ${err instanceof Error ? err.message : String(err)}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("tunnel-disable", "Stop the Cloudflare Tunnel process. Config is preserved for re-enabling.", {}, async () => {
+    try {
+        cloudflared.stopTunnel();
+        return {
+            content: [{ type: "text", text: "Tunnel stopped. Config preserved — use tunnel-enable to restart." }],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{ type: "text", text: `Disable failed: ${err instanceof Error ? err.message : String(err)}` }],
+            isError: true,
+        };
+    }
+});
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=index.js.map

package/payload/platform/plugins/cloudflare/mcp/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,KAAK,WAAW,MAAM,sBAAsB,CAAC;AAEpD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,sEAAsE;AACtE,0BAA0B;AAC1B,sEAAsE;AAEtE,MAAM,CAAC,IAAI,CACT,eAAe,EACf,0FAA0F,EAC1F;IACE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yEAAyE,CAAC;CAClH,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACzG,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,wDAAwD,EACxD,EAAE,EACF,KAAK,IAAI,EAAE;IACT,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAE5D,IAAI,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,sCAAsC,CAAC,IAAI,EAAE,CAAC;SACxF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1D,MAAM,MAAM,GAAG,wFAAwF,IAAI,MAAM,CAAC;QAElH,YAAY,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1F,YAAY,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,sBAAsB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAEnD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,2BAA2B,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;SACjG,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACtH,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,8KAA8K,EAC9K,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,yDAAyD,EAAE,CAAC;YACrG,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,eAAe,EAAE,EAAE,CAAC;QAClC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wCAAwC,EAAE,CAAC;SACrF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC;QAEvC,6DAA6D;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,KAAK,EAAE,CAAC;YACxD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oEAAoE,EAAE,CAAC;gBAChH,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,mFAAmF,KAAK,CAAC,OAAO,wJAAwJ;iBAC/P;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC/G,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,kFAAkF,EAClF;IACE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6FAA6F,CAAC;IAC1H,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;CACxG,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;IAC/B,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,yDAAyD,EAAE,CAAC;YACrG,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,4DAA4D,EAAE,CAAC;YACxG,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAE9C,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;QACzD,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,MAAM,EAAE,CAAC,CAAC;QAE1D,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAEnG,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,4BAA4B,MAAM,CAAC,QAAQ,aAAa,MAAM,CAAC,UAAU,kBAAkB,MAAM,4BAA4B,MAAM,wBAAwB,UAAU,4CAA4C;iBACxN;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAChH,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,0FAA0F,EAC1F;IACE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC/D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CACjE,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,CAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAC3B,gBAAgB,QAAQ,OAAO,CAChC,CAAC;QACF,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACrF,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEpC,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,6CAA6C,MAAM,8BAA8B,MAAM,EAAE;iBAChG;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAChH,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,0EAA0E,EAC1E,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,CAAC;QACH,WAAW,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kEAAkE,EAAE,CAAC;SAC/G,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACjH,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/payload/platform/plugins/cloudflare/mcp/dist/lib/cloudflared.d.ts

@@ -0,0 +1,45 @@
+import { type ChildProcess } from "node:child_process";
+export declare function findBinary(): string | null;
+export declare function isInstalled(): boolean;
+export declare function version(): string | null;
+export declare function isAuthenticated(): boolean;
+/**
+ * Start the cloudflared login flow.
+ * Returns the auth URL that the user must visit (or encode as QR code).
+ * This is a long-running process — it waits for the user to authenticate
+ * in their browser. The process completes when cert.pem is written.
+ */
+export declare function startLogin(): {
+    authUrl: string;
+    process: ChildProcess;
+};
+interface TunnelCreateResult {
+    tunnelId: string;
+    tunnelName: string;
+    credentialsFile: string;
+}
+export declare function createTunnel(name: string): TunnelCreateResult;
+export declare function routeDns(tunnelId: string, hostname: string): void;
+interface TunnelInfo {
+    id: string;
+    name: string;
+}
+export declare function listTunnels(): TunnelInfo[];
+export declare function writeConfig(tunnelId: string, credentialsFile: string, domain: string, port: number): string;
+export interface TunnelStatus {
+    installed: boolean;
+    version: string | null;
+    authenticated: boolean;
+    running: boolean;
+    pid: number | null;
+    domain: string | null;
+    adminUrl: string | null;
+    publicUrl: string | null;
+    upSince: number | null;
+    restartCount: number;
+}
+export declare function getStatus(domain?: string): TunnelStatus;
+export declare function startTunnel(configPath: string): void;
+export declare function stopTunnel(): void;
+export {};
+//# sourceMappingURL=cloudflared.d.ts.map

package/payload/platform/plugins/cloudflare/mcp/dist/lib/cloudflared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflared.d.ts","sourceRoot":"","sources":["../../src/lib/cloudflared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAiB5E,wBAAgB,UAAU,IAAI,MAAM,GAAG,IAAI,CAsB1C;AAED,wBAAgB,WAAW,IAAI,OAAO,CAErC;AAED,wBAAgB,OAAO,IAAI,MAAM,GAAG,IAAI,CAUvC;AAQD,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAmCvE;AAMD,UAAU,kBAAkB;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CA4B7D;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAcjE;AAED,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,WAAW,IAAI,UAAU,EAAE,CAc1C;AAMD,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,MAAM,CAkBR;AAcD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,CAavD;AAED,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAapD;AA8BD,wBAAgB,UAAU,IAAI,IAAI,CAsBjC"}

package/payload/platform/plugins/cloudflare/mcp/dist/lib/cloudflared.js

@@ -0,0 +1,256 @@
+import { execFileSync, spawn } from "node:child_process";
+import { existsSync, writeFileSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+// ---------------------------------------------------------------------------
+// Binary detection
+// ---------------------------------------------------------------------------
+let cachedBinaryPath = null;
+const SEARCH_PATHS = [
+    "/usr/local/bin/cloudflared",
+    "/usr/bin/cloudflared",
+    join(homedir(), ".local/bin/cloudflared"),
+];
+export function findBinary() {
+    if (cachedBinaryPath)
+        return cachedBinaryPath;
+    // Try `which` first
+    try {
+        cachedBinaryPath = execFileSync("which", ["cloudflared"], {
+            encoding: "utf-8",
+            timeout: 5000,
+        }).trim();
+        return cachedBinaryPath;
+    }
+    catch {
+        // not on PATH
+    }
+    for (const p of SEARCH_PATHS) {
+        if (existsSync(p)) {
+            cachedBinaryPath = p;
+            return p;
+        }
+    }
+    return null;
+}
+export function isInstalled() {
+    return findBinary() !== null;
+}
+export function version() {
+    const bin = findBinary();
+    if (!bin)
+        return null;
+    try {
+        const out = execFileSync(bin, ["--version"], { encoding: "utf-8", timeout: 5000 });
+        const match = out.match(/cloudflared version (\S+)/);
+        return match?.[1] ?? out.trim();
+    }
+    catch {
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
+// Authentication
+// ---------------------------------------------------------------------------
+const CERT_PATH = join(homedir(), ".cloudflared/cert.pem");
+export function isAuthenticated() {
+    return existsSync(CERT_PATH);
+}
+/**
+ * Start the cloudflared login flow.
+ * Returns the auth URL that the user must visit (or encode as QR code).
+ * This is a long-running process — it waits for the user to authenticate
+ * in their browser. The process completes when cert.pem is written.
+ */
+export function startLogin() {
+    const bin = findBinary();
+    if (!bin)
+        throw new Error("cloudflared is not installed");
+    const child = spawn(bin, ["tunnel", "login"], {
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    let authUrl = "";
+    let stderrBuffer = "";
+    // cloudflared prints the auth URL to stderr
+    child.stderr?.on("data", (chunk) => {
+        stderrBuffer += chunk.toString();
+        const match = stderrBuffer.match(/(https:\/\/dash\.cloudflare\.com\/argotunnel[^\s]+)/);
+        if (match && !authUrl) {
+            authUrl = match[1];
+        }
+    });
+    // Also check stdout (some versions print there)
+    child.stdout?.on("data", (chunk) => {
+        const text = chunk.toString();
+        const match = text.match(/(https:\/\/dash\.cloudflare\.com\/argotunnel[^\s]+)/);
+        if (match && !authUrl) {
+            authUrl = match[1];
+        }
+    });
+    return {
+        get authUrl() {
+            return authUrl;
+        },
+        process: child,
+    };
+}
+export function createTunnel(name) {
+    const bin = findBinary();
+    if (!bin)
+        throw new Error("cloudflared is not installed");
+    // Check for existing tunnel with this name
+    const existing = listTunnels().find((t) => t.name === name);
+    if (existing) {
+        const credentialsFile = join(homedir(), `.cloudflared/${existing.id}.json`);
+        return {
+            tunnelId: existing.id,
+            tunnelName: existing.name,
+            credentialsFile,
+        };
+    }
+    const output = execFileSync(bin, ["tunnel", "create", name], {
+        encoding: "utf-8",
+        timeout: 30000,
+    });
+    // Parse tunnel ID from output: "Created tunnel {name} with id {uuid}"
+    const match = output.match(/with id ([a-f0-9-]+)/);
+    if (!match)
+        throw new Error(`Failed to parse tunnel ID from: ${output}`);
+    const tunnelId = match[1];
+    const credentialsFile = join(homedir(), `.cloudflared/${tunnelId}.json`);
+    return { tunnelId, tunnelName: name, credentialsFile };
+}
+export function routeDns(tunnelId, hostname) {
+    const bin = findBinary();
+    if (!bin)
+        throw new Error("cloudflared is not installed");
+    try {
+        execFileSync(bin, ["tunnel", "route", "dns", "--overwrite-dns", tunnelId, hostname], {
+            encoding: "utf-8",
+            timeout: 30000,
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        // "already exists" is success
+        if (!msg.includes("already exists"))
+            throw err;
+    }
+}
+export function listTunnels() {
+    const bin = findBinary();
+    if (!bin)
+        return [];
+    try {
+        const output = execFileSync(bin, ["tunnel", "list", "--output", "json"], {
+            encoding: "utf-8",
+            timeout: 15000,
+        });
+        const tunnels = JSON.parse(output);
+        return tunnels.map((t) => ({ id: t.id, name: t.name }));
+    }
+    catch {
+        return [];
+    }
+}
+// ---------------------------------------------------------------------------
+// Config generation
+// ---------------------------------------------------------------------------
+export function writeConfig(tunnelId, credentialsFile, domain, port) {
+    const configDir = join(homedir(), ".cloudflared");
+    mkdirSync(configDir, { recursive: true });
+    const configPath = join(configDir, `tunnel-${tunnelId}.yml`);
+    const yaml = `tunnel: ${tunnelId}
+credentials-file: ${credentialsFile}
+
+ingress:
+  - hostname: admin.${domain}
+    service: http://localhost:${port}
+  - hostname: public.${domain}
+    service: http://localhost:${port}
+  - service: http_status:404
+`;
+    writeFileSync(configPath, yaml, "utf-8");
+    return configPath;
+}
+// ---------------------------------------------------------------------------
+// Process management
+// ---------------------------------------------------------------------------
+let tunnelProcess = null;
+let tunnelUpSince = null;
+let suppressRestart = false;
+let restartCount = 0;
+const BACKOFF = [5_000, 10_000, 20_000, 30_000];
+let healthInterval = null;
+export function getStatus(domain) {
+    return {
+        installed: isInstalled(),
+        version: version(),
+        authenticated: isAuthenticated(),
+        running: tunnelProcess !== null && tunnelProcess.exitCode === null,
+        pid: tunnelProcess?.pid ?? null,
+        domain: domain ?? null,
+        adminUrl: domain ? `https://admin.${domain}` : null,
+        publicUrl: domain ? `https://public.${domain}` : null,
+        upSince: tunnelUpSince,
+        restartCount,
+    };
+}
+export function startTunnel(configPath) {
+    const bin = findBinary();
+    if (!bin)
+        throw new Error("cloudflared is not installed");
+    if (tunnelProcess && tunnelProcess.exitCode === null) {
+        throw new Error("Tunnel is already running");
+    }
+    suppressRestart = false;
+    restartCount = 0;
+    spawnTunnel(bin, configPath);
+    startHealthCheck(bin, configPath);
+}
+function spawnTunnel(bin, configPath) {
+    tunnelProcess = spawn(bin, ["tunnel", "--config", configPath, "run"], {
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    tunnelUpSince = Date.now();
+    tunnelProcess.on("exit", (code) => {
+        tunnelUpSince = null;
+        if (!suppressRestart) {
+            const delay = BACKOFF[Math.min(restartCount, BACKOFF.length - 1)];
+            restartCount++;
+            setTimeout(() => {
+                if (!suppressRestart)
+                    spawnTunnel(bin, configPath);
+            }, delay);
+        }
+    });
+}
+function startHealthCheck(bin, configPath) {
+    if (healthInterval)
+        clearInterval(healthInterval);
+    healthInterval = setInterval(() => {
+        if (tunnelProcess && tunnelProcess.exitCode !== null && !suppressRestart) {
+            spawnTunnel(bin, configPath);
+        }
+    }, 30_000);
+}
+export function stopTunnel() {
+    suppressRestart = true;
+    if (healthInterval) {
+        clearInterval(healthInterval);
+        healthInterval = null;
+    }
+    if (tunnelProcess && tunnelProcess.exitCode === null) {
+        tunnelProcess.kill("SIGTERM");
+        // Force kill after 5 seconds
+        const timeout = setTimeout(() => {
+            if (tunnelProcess && tunnelProcess.exitCode === null) {
+                tunnelProcess.kill("SIGKILL");
+            }
+        }, 5000);
+        tunnelProcess.on("exit", () => clearTimeout(timeout));
+    }
+    tunnelProcess = null;
+    tunnelUpSince = null;
+}
+//# sourceMappingURL=cloudflared.js.map

package/payload/platform/plugins/cloudflare/mcp/dist/lib/cloudflared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflared.js","sourceRoot":"","sources":["../../src/lib/cloudflared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAgB,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAW,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAE3C,MAAM,YAAY,GAAG;IACnB,4BAA4B;IAC5B,sBAAsB;IACtB,IAAI,CAAC,OAAO,EAAE,EAAE,wBAAwB,CAAC;CAC1C,CAAC;AAEF,MAAM,UAAU,UAAU;IACxB,IAAI,gBAAgB;QAAE,OAAO,gBAAgB,CAAC;IAE9C,oBAAoB;IACpB,IAAI,CAAC;QACH,gBAAgB,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE;YACxD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,gBAAgB,GAAG,CAAC,CAAC;YACrB,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,EAAE,KAAK,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACrD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC;AAE3D,MAAM,UAAU,eAAe;IAC7B,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE;QAC5C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,YAAY,GAAG,EAAE,CAAC;IAEtB,4CAA4C;IAC5C,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,YAAY,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACxF,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAChF,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,OAAO;YACT,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAYD,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE1D,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5E,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,UAAU,EAAE,QAAQ,CAAC,IAAI;YACzB,eAAe;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;QAC3D,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,sEAAsE;IACtE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAC;IAEzE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,QAAQ,OAAO,CAAC,CAAC;IAEzE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,QAAgB;IACzD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,YAAY,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACnF,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,8BAA8B;QAC9B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAAE,MAAM,GAAG,CAAC;IACjD,CAAC;AACH,CAAC;AAOD,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;YACvE,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAwC,CAAC;QAC1E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,MAAM,UAAU,WAAW,CACzB,QAAgB,EAChB,eAAuB,EACvB,MAAc,EACd,IAAY;IAEZ,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IAClD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,QAAQ,MAAM,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,WAAW,QAAQ;oBACd,eAAe;;;sBAGb,MAAM;gCACI,IAAI;uBACb,MAAM;gCACG,IAAI;;CAEnC,CAAC;IAEA,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,IAAI,aAAa,GAAwB,IAAI,CAAC;AAC9C,IAAI,aAAa,GAAkB,IAAI,CAAC;AACxC,IAAI,eAAe,GAAG,KAAK,CAAC;AAC5B,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAChD,IAAI,cAAc,GAA0C,IAAI,CAAC;AAejE,MAAM,UAAU,SAAS,CAAC,MAAe;IACvC,OAAO;QACL,SAAS,EAAE,WAAW,EAAE;QACxB,OAAO,EAAE,OAAO,EAAE;QAClB,aAAa,EAAE,eAAe,EAAE;QAChC,OAAO,EAAE,aAAa,KAAK,IAAI,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI;QAClE,GAAG,EAAE,aAAa,EAAE,GAAG,IAAI,IAAI;QAC/B,MAAM,EAAE,MAAM,IAAI,IAAI;QACtB,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;QACnD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;QACrD,OAAO,EAAE,aAAa;QACtB,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAAkB;IAC5C,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE1D,IAAI,aAAa,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,eAAe,GAAG,KAAK,CAAC;IACxB,YAAY,GAAG,CAAC,CAAC;IAEjB,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC7B,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,UAAkB;IAClD,aAAa,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;QACpE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IAEH,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE3B,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAChC,aAAa,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAClE,YAAY,EAAE,CAAC;YACf,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,eAAe;oBAAE,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACrD,CAAC,EAAE,KAAK,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,UAAkB;IACvD,IAAI,cAAc;QAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAClD,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,IAAI,aAAa,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzE,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,eAAe,GAAG,IAAI,CAAC;IACvB,IAAI,cAAc,EAAE,CAAC;QACnB,aAAa,CAAC,cAAc,CAAC,CAAC;QAC9B,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,IAAI,aAAa,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACrD,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE9B,6BAA6B;QAC7B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,IAAI,aAAa,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACrD,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,CAAC;QAET,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,aAAa,GAAG,IAAI,CAAC;IACrB,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC"}

package/payload/platform/plugins/cloudflare/mcp/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "@maxy/cloudflare",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "@types/node": "^22.0.0"
+  }
+}

package/payload/platform/plugins/cloudflare/references/setup-guide.md

@@ -0,0 +1,110 @@
+# Cloudflare Tunnel Setup Guide
+
+## Prerequisites
+
+- A Cloudflare account (free at cloudflare.com)
+- A domain on Cloudflare (see "Getting a domain on Cloudflare" below)
+- Access to the control panel Setup page on the local network
+
+### Getting a domain on Cloudflare
+
+The tunnel needs a domain managed by Cloudflare. There are two paths:
+
+**Option A: Buy a new domain through Cloudflare**
+1. Go to cloudflare.com → **Domains** → **Buy a domain**
+2. Search for a domain name and purchase it (Cloudflare sells at cost, no markup)
+3. The domain is automatically set up — no further DNS configuration needed
+
+**Option B: Add an existing domain**
+If the user already owns a domain through another registrar (GoDaddy, Namecheap, etc.):
+1. Go to cloudflare.com → **Domains** → **Onboard a domain**
+2. Enter the domain and select the **Free** plan
+3. Cloudflare scans existing DNS records and imports them — review the list to make sure everything is there (website, email, etc.)
+4. Cloudflare shows two nameservers (e.g. `anna.ns.cloudflare.com`, `bob.ns.cloudflare.com`)
+5. Go to the domain registrar and replace the existing nameservers with the Cloudflare ones
+6. Wait for propagation (usually minutes, can take up to 24 hours)
+7. Cloudflare shows the domain as **Active** once propagation is complete
+
+**Will my website go down?** No. Cloudflare imports all existing DNS records in step 3, so traffic continues to reach the same servers as before. Cloudflare sits in front as a proxy — existing websites, email, and other services keep working. The only thing that changes is which nameservers answer DNS queries. If in doubt, check the imported records match what the registrar had before switching.
+
+Once the domain is active on Cloudflare, Taskmaster uses it to create two subdomains automatically. Any domain works — including ones with a `www` prefix (e.g. `www.mybusiness.com`).
+
+## Setup Flow
+
+The entire setup is done from the **Setup page** in the control panel. Look for the **Cloudflare** row in the setup cards.
+
+### Step 1: Install cloudflared
+
+The Setup page checks whether cloudflared is installed automatically.
+
+- If it shows "Not Installed", tap **Install** — the system handles it
+- If auto-install fails (e.g. on an unsupported platform), the UI shows manual install instructions specific to the device's OS
+- Once installed, the status updates automatically
+
+### Step 2: Authenticate with Cloudflare
+
+Tap **Connect** on the Cloudflare card. This opens a browser window on the device:
+
+- Sign in to the Cloudflare account if prompted
+- A list of domains (zones) appears — select the domain to use for the tunnel
+- A confirmation dialog appears: "Authorize Tunnel for [domain]" — click **Authorize**
+- The browser confirms success and the Setup page updates automatically
+
+The user needs a Cloudflare account with at least one active domain before this step. If they don't have one, guide them through the prerequisites above first.
+
+### Step 3: Create the tunnel
+
+Tap **Set up** to open the wizard. It shows the two endpoints that will be created automatically:
+
+- **Control panel** — `admin.{domain}` — for remote access to the setup and admin interface
+- **Public chat** — `public.{domain}` — for customers to reach the chat
+
+There is nothing to fill in — both addresses are derived from the domain authorised in Step 2. The tunnel creates the DNS records (CNAMEs) for both automatically — no need to touch the Cloudflare dashboard.
+
+### Step 4: Set a remote password
+
+The wizard's second step asks for a username and password. This protects the control panel when accessed from the public internet via `admin.{domain}`.
+
+Explain to the user:
+- This is separate from the device PIN (which is for local network access only)
+- These credentials work for all accounts on the device (like a router admin password)
+- The password must be at least 8 characters, contain a number, contain a special character, and have no leading/trailing spaces
+- The wizard shows a live checklist of password requirements as they type
+
+### Step 5: Enable Tunnel
+
+The wizard's final step shows a summary and an **Enable Tunnel** button. Once enabled:
+
+- The control panel is live at `https://admin.{domain}` — requires the username and password set in Step 4
+- The public chat is live at `https://public.{domain}/chat/{account-slug}`
+- Local network access continues to work with just the PIN
+
+## After Setup
+
+The Cloudflare card on the Setup page shows the tunnel status and the admin hostname. Tapping the card opens an info panel with connection details and the public chat URL.
+
+## Troubleshooting
+
+### Tunnel won't start
+- Check the Cloudflare card on the Setup page for status details
+- If authentication has expired, tap **Log in** again to re-authenticate
+- If the credentials file is missing, the tunnel may need to be recreated via the wizard
+
+### DNS not resolving
+- DNS propagation can take 1-5 minutes after tunnel creation
+- Verify the tunnel is running (green status on the Setup page)
+- Check the Cloudflare dashboard to confirm the CNAME records exist for both `admin.{domain}` and `public.{domain}`
+
+### Remote login issues
+- After 5 failed login attempts, there's a 15-minute lockout — wait for it to expire
+- The password can be reset from the Setup page on the local network
+
+### Changing domain
+- Disable the tunnel from the Setup page
+- Re-authenticate with Cloudflare using the new domain
+- Run the wizard again — it will create new DNS records for the new domain
+- Old DNS records can be removed from the Cloudflare dashboard
+
+## Agent Tools
+
+The tunnel tools (`tunnel_status`, `tunnel_enable`, `tunnel_disable`) give the agent visibility and control over the tunnel. Use these when the user asks about tunnel status or wants to enable/disable remotely via chat. For initial setup, always direct users to the Setup page wizard.

package/payload/platform/plugins/contacts/PLUGIN.md

@@ -0,0 +1,18 @@
+---
+name: contacts
+description: "CRM contacts plugin. Provides contact-create, contact-lookup, contact-update, and contact-list tools for managing the customer contact graph."
+icon: 👥
+tools:
+  - contact-create
+  - contact-lookup
+  - contact-update
+  - contact-list
+always: true
+embed: false
+---
+
+# Contacts
+
+Manages customer contact records in the knowledge graph. Admin agent only — the public agent has no write access.
+
+Tools are available via the `contacts` MCP server.

package/payload/platform/plugins/contacts/mcp/dist/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/plugins/contacts/mcp/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}