neuro-canvas-lms 2.12.0 → 2.13.0

package/AGENTS.md

@@ -2,8 +2,8 @@
 
 This repo, **Neuro-CanvasLMS** (`neuro-canvas-lms`), is a read-only Canvas LMS connector (remote MCP
 server on Cloudflare Workers) that each user deploys to their **own** Cloudflare account. It works
-with any Canvas school; nothing school-specific is in the code (the school comes from Worker vars).
-It is a community project provided as is.
+with any Canvas school that lets students create access tokens; nothing school-specific is in the
+code (the school comes from Worker vars). It is a community project provided as is.
 
 - To install, update, reconnect, uninstall or troubleshoot: follow
   `.claude/skills/canvas-connector-setup/SKILL.md` (Claude Code loads it as a skill; other agents
@@ -30,9 +30,12 @@ Code map:
   `download-link.mjs` (one-time, minutes-long Canvas storage link so coding agents can curl an original
   file to disk).
 - `owner.mjs`: owner binding, allowed OAuth clients. `i18n.mjs` + `pages.mjs`: web pages.
+  `page-scene.mjs`: their one script (allowed by its hash in the CSP; pages stay off the network):
+  the black-hole scene and the step-by-step authorization. Everything works without it.
 - `update-check.mjs`: once a day reads the newest version number from npm; when it is newer the AI
   tells the user how to update. Also the `canvas_connector_version` tool.
-- `installer/`: the setup wizard. Re-running it asks once (y/n), then updates with the saved
+- `installer/`: the setup wizard. On a new Cloudflare account it registers a random workers.dev
+  subdomain through Cloudflare's API. Re-running it asks once (y/n), then updates with the saved
   settings (without a terminal it does not ask). `installer/verify.mjs`: the post-deploy online
   check, also run alone by `npx -y neuro-canvas-lms check`.
 - `version.mjs`: shown on the home page and /healthz, compared with npm by update-check.mjs.

package/README.md

@@ -2,9 +2,11 @@
 
 **English** · [简体中文](docs/README.zh-CN.md) · [Español](docs/README.es.md) · [日本語](docs/README.ja.md) · [हिन्दी](docs/README.hi.md)
 
-**Wire your Canvas LMS straight into Claude and ChatGPT.** Your courses, deadlines, grades and lecture files become part of what your AI knows, in any chat and on any device. Works with any school that uses Canvas.
+![Neuro-CanvasLMS answering "What's due this week?" in Claude](https://raw.githubusercontent.com/BloodyReginaa/Neuro-CanvasLMS/main/docs/images/banner.png)
 
-> "What's due this week?" · "Summarize Lecture 5 in MATH 132." · "What feedback did I get on HW 3?" · "What's in the code ZIP for Lecture 12?"
+**Wire your Canvas LMS straight into Claude and ChatGPT.** Your courses, deadlines, grades and lecture files become part of what your AI knows, in any chat and on any device. It is a read-only remote MCP server that one command deploys to your own free Cloudflare account. Works at any Canvas school that lets students create access tokens ([30-second check](#can-you-use-it)).
+
+> "What's due this week?" · "Summarize Lecture 5 in MATH 132." · "What feedback did I get on HW 3?" · "What's in the code ZIP for Lecture 12?" · "Set up the PA2 starter code in this folder."
 
 ## Why Neuro-CanvasLMS
 
@@ -15,7 +17,7 @@
 | 💸 **Free** | It runs on Cloudflare's free plan, which is far more than one student needs. |
 | 🧠 **Your files live in the conversation** | Lecture notes and PDFs the AI reads stay with that chat on your AI provider's servers. Nothing to download. |
 
-Most Canvas integrations for AI are **local** tools: they only work while your own computer runs them, and only inside desktop or coding apps. Neuro-CanvasLMS is a **remote connector** that runs in your own Cloudflare account, so it also works on your phone and in ChatGPT.
+Local Canvas tools only work while your own computer runs them. Hosted services keep your Canvas token, or a copy of your courses, on their servers. Neuro-CanvasLMS runs in **your own** Cloudflare account: always on, usable from your phone and in ChatGPT, and your token goes only to your own Worker and your school's Canvas.
 
 ## What you get
 
@@ -23,20 +25,25 @@ Most Canvas integrations for AI are **local** tools: they only work while your o
 - **Real file reading:** text from PDF, Word, PowerPoint and Excel, about 90 kinds of code and text files, and Jupyter notebooks (cells and outputs); ZIP archives unpacked on the server (listing plus every code/text file); scanned or handwritten PDFs are recognised and their original pages handed to the AI to look at.
 - **Linked files too:** course files that a module links on Google Docs/Slides/Sheets, Google Drive, Dropbox (files and folders) and GitHub (files and repositories) are read as text, as long as they are shared publicly ("Anyone with the link").
 - **Finds files the course hides:** many courses hide their Files list from students. The connector searches the front page, syllabus, modules, assignments, announcements and the pages they link to, so the AI can still find "the Lecture 12 slides" by name.
+- **Starter code onto your computer:** in Claude Code, Codex and other coding agents, ask "set up PA2 from Canvas". The agent gets a one-time download link that expires in minutes, saves the assignment's starter files in your folder and unpacks them.
 - **Read-only by design:** only fixed `GET` requests. It never submits work, sends messages, starts quizzes or changes anything in Canvas.
 - **Yours only:** deployed in your own Cloudflare account and locked to your own Canvas account. Nobody else, including the authors, ever sees your Canvas token.
 
+## Can you use it?
+
+Check in 30 seconds: in Canvas, open **Account → Settings** and scroll to **Approved Integrations**. If you see a **+ New Access Token** button, you're set. If it is missing, or creating a token is refused, your school doesn't let students make personal tokens, and this connector can't work there yet.
+
 ## Install (about 5 minutes)
 
-You need [Node.js 22+](https://nodejs.org), a free [Cloudflare account](https://dash.cloudflare.com/sign-up) and your Canvas login. In a terminal, run:
+You need [Node.js 22+](https://nodejs.org), a free [Cloudflare account](https://dash.cloudflare.com/sign-up) (verify its email address) and your Canvas login. In a terminal, run:
 
 ```bash
 npx -y neuro-canvas-lms
 ```
 
-The installer signs you in to Cloudflare (a browser page opens; click **Authorize**), asks for your school's Canvas address, deploys the connector to your own account and checks that it works. Then:
+The installer signs you in to Cloudflare (a browser page opens; click **Authorize**), asks for your school's Canvas address, sets up your free workers.dev address if the account is new, deploys the connector to your own account and checks that it works. A new address can take a few minutes to come online; meanwhile the installer opens Canvas so you can create your token. Then:
 
-1. **Create a Canvas token:** Canvas → Account → Settings → **+ New Access Token**. Your school may cap its lifetime (30 days at UMass Amherst). Copy it right away; Canvas shows it only once.
+1. **Create a Canvas token** (if you haven't yet): Canvas → Account → Settings → **+ New Access Token**. Your school may cap its lifetime (30 days at UMass Amherst). Copy it right away; Canvas shows it only once.
 2. **Claude:** Settings → Connectors → **Add custom connector** → paste the URL the installer printed (it is already copied) → **Connect** → paste the Canvas token → Authorize. It then works everywhere you use Claude, including the mobile app and Claude Code.
 3. **ChatGPT:** add a custom connector (developer mode) with the same URL.
 4. Start a new chat and ask: "What assignments do I have this week?"

package/canvas.mjs

@@ -229,27 +229,55 @@ export async function callCanvas(name, args, token, fetcher = fetch, opts = {})
   return out;
 }
 
+// Canvas could not be reached at all: say so (and that the connection is fine), so the AI retries
+// instead of changing its arguments. Our own transport messages already start with "Canvas".
+export function unreachable(e) {
+  if (/^Canvas/.test(e?.message ?? '')) return e;
+  const timeout = e?.name === 'TimeoutError' || e?.name === 'AbortError';
+  return Object.assign(
+    new Error(
+      timeout
+        ? 'Canvas did not answer within 20 seconds; it may be slow or down right now. Try again in a minute. The token and the connection are fine: do not reconnect.'
+        : `Canvas could not be reached (network error: ${e?.name ?? 'Error'}). Try again in a minute. The token and the connection are fine: do not reconnect.`,
+    ),
+    { unreachable: true, cause: e },
+  );
+}
+
 // One GET to the Canvas API: fixed headers, no redirects, Canvas errors turned into safe messages
 // (never the upstream body). `e.status` is set when Canvas refused this item (not a token problem).
 export async function canvasGet(u, token, fetcher = fetch) {
-  const r = await fetcher(u, {
-    method: 'GET',
-    headers: {
-      Authorization: `Bearer ${token}`,
-      Accept: 'application/json',
-      'User-Agent': 'Neuro-CanvasLMS/2.0 (read-only personal integration)',
-    },
-    redirect: 'manual',
-    signal: AbortSignal.timeout(20000),
-  });
+  let r;
+  try {
+    r = await fetcher(u, {
+      method: 'GET',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        Accept: 'application/json',
+        'User-Agent': 'Neuro-CanvasLMS/2.0 (read-only personal integration)',
+      },
+      redirect: 'manual',
+      signal: AbortSignal.timeout(20000),
+    });
+  } catch (e) {
+    throw unreachable(e);
+  }
   if (
     r.status === 406 ||
     (r.status >= 500 && !(r.headers.get('content-type') ?? '').includes('json'))
   ) {
-    // Canvas answers its API with JSON. An HTML error page means a firewall in front of Canvas
-    // rejected the request, or Canvas failed on a malformed token (it returns an HTML 500 for that).
-    throw new Error(
-      `Canvas returned an HTML error page (HTTP ${r.status}) instead of JSON: a firewall in front of Canvas rejected the request, or the token is malformed. If it persists, reconnect with a freshly created token.`,
+    // Canvas answers its API with JSON. An HTML error page means Canvas is down or in maintenance
+    // (502/503/504 from the load balancer), a firewall in front of Canvas rejected the request, or
+    // Canvas failed on a malformed token (an HTML 500; only possible on the authorization page,
+    // since a connected token already passed). The phrase "HTML error page" stops canvas_find_files.
+    await r.body?.cancel().catch(() => {});
+    throw Object.assign(
+      new Error(
+        [502, 503, 504].includes(r.status)
+          ? `Canvas is temporarily unavailable (HTTP ${r.status}, an HTML error page instead of JSON). Try again in a few minutes. The token and the connection are fine: do not reconnect.`
+          : `Canvas returned an HTML error page (HTTP ${r.status}) instead of JSON: usually a temporary Canvas problem or a firewall in front of Canvas. Try again in a few minutes; reconnecting does not help.`,
+      ),
+      { htmlError: r.status },
     );
   }
   if (r.status === 401) {
@@ -276,7 +304,14 @@ export async function canvasGet(u, token, fetcher = fetch) {
       ),
       { status: r.status },
     );
-  const data = await r.json();
+  let data;
+  try {
+    data = await r.json();
+  } catch {
+    throw new Error(
+      `Canvas answered HTTP ${r.status} but not with JSON (a maintenance or login page in between?). Try again in a few minutes; the token and the connection are fine.`,
+    );
+  }
   const next = nextPage(r.headers.get('link'));
   // api_url is the API request itself (it shows JSON); links for the user are the html_url fields.
   return { data, has_more: next !== null, next_page: next, api_url: u.href };
@@ -299,12 +334,22 @@ const FEED = /https?:\/\/[^\s"'<>()]*\/feeds\/[^\s"'<>()]+/gi;
 const LINK = /(?:https?:\/\/|\/api\/v1\/(?:canvadoc|crocodoc)_session)[^\s"'<>()]*/gi;
 const SIGNED =
   /(?:canvadoc|crocodoc)_session|[?&](?:amp;)?(?:sf_verifier|hmac|x-amz-signature|signature)=|[?&](?:amp;)?token=[\w-]+\.[\w-]+\.[\w-]+/i;
-const SIGNED_KEYS = new Set(['canvadoc_session_url', 'crocodoc_session_url']);
+// A file's `uuid` is the verifier itself (Canvas accepts ?verifier=<uuid>) and its thumbnail_url
+// carries it in the path; a course's uuid is the key of its calendar feed. Raw results lose them.
+const SIGNED_KEYS = new Set([
+  'canvadoc_session_url',
+  'crocodoc_session_url',
+  'uuid',
+  'thumbnail_url',
+]);
+// The same pass URL-encoded inside another link (e.g. a login page's return_to=).
+const ENCODED_VERIFIER = /verifier%3D[^&#"'\s<>()%]*/gi;
 export function withoutVerifiers(value) {
   if (typeof value === 'string') {
     let v = value;
     if (v.includes('verifier='))
       v = v.replace(VERIFIER, (m, before, after) => (after ? before : ''));
+    if (/verifier%3D/i.test(v)) v = v.replace(ENCODED_VERIFIER, 'verifier%3D');
     if (v.includes('/feeds/')) v = v.replace(FEED, '[private feed link removed]');
     if (/[?]|_session/.test(v))
       v = v.replace(LINK, link => (SIGNED.test(link) ? '[signed link removed]' : link));

package/file-content.mjs

@@ -226,6 +226,20 @@ export async function extractBytes(bytes, shown, mime = '', opts = {}) {
       'This format is not supported for text extraction. Call canvas_file_original with this file_id to get the original file.',
   };
 }
+// extractBytes, but a parser failing on the file itself (damaged, password-protected, or not really
+// a PDF/Office file) becomes a note with a way on instead of an error the AI reads as "check your
+// arguments". Our own messages (limits, a wrong `entry`) start with "Canvas" and go through.
+export async function extractOrExplain(bytes, name, mime, opts, wayOn) {
+  try {
+    return await extractBytes(bytes, name, mime, opts);
+  } catch (e) {
+    if (/^Canvas/.test(e?.message ?? '')) throw e;
+    return {
+      text: null,
+      extraction_note: `Could not read the text of this file (${e?.name ?? 'Error'}): it may be damaged, password-protected, or not really the type its name says. ${wayOn}`,
+    };
+  }
+}
 export async function readFileContent(meta, args, fetcher = fetch) {
   // `hidden` files are only hidden from the Files list ("only available with link"), which is how
   // many courses share files; students may open them. Only a lock stops a download.
@@ -237,7 +251,14 @@ export async function readFileContent(meta, args, fetcher = fetch) {
     html_url: `https://${CANVAS_HOST}/files/${meta.id}`,
     mime_type: meta['content-type'],
   };
-  if (!meta.url || !allowedDownload(meta.url))
+  if (!meta.url)
+    return {
+      ...base,
+      text: null,
+      extraction_note:
+        'Canvas gives no download address for this file (it may only be viewable inside Canvas); open html_url.',
+    };
+  if (!allowedDownload(meta.url))
     return {
       ...base,
       text: null,
@@ -262,14 +283,22 @@ export async function readFileContent(meta, args, fetcher = fetch) {
       throw new Error(
         'Canvas file redirect host is not allowed: ' + [...hops, where(url)].join(' → '),
       );
-    response = await fetcher(url, {
-      method: 'GET',
-      redirect: 'manual',
-      headers: { Accept: '*/*', 'User-Agent': DOWNLOAD_UA },
-      signal: AbortSignal.timeout(20000),
-    });
+    try {
+      response = await fetcher(url, {
+        method: 'GET',
+        redirect: 'manual',
+        headers: { Accept: '*/*', 'User-Agent': DOWNLOAD_UA },
+        signal: AbortSignal.timeout(20000),
+      });
+    } catch (e) {
+      if (/^Canvas/.test(e?.message ?? '')) throw e;
+      throw new Error(
+        `Canvas file download did not finish (${e?.name === 'TimeoutError' || e?.name === 'AbortError' ? 'no answer within 20 seconds' : 'network error: ' + (e?.name ?? 'Error')}; ${where(url)}). Try again in a minute; the connection is fine.`,
+      );
+    }
     hops.push(response.status + ' ' + where(url));
     if (response.status >= 300 && response.status < 400) {
+      await response.body?.cancel().catch(() => {});
       const location = response.headers.get('location');
       if (!location) throw new Error('Canvas download redirect is missing its destination.');
       url = new URL(location, url).href;
@@ -293,11 +322,12 @@ export async function readFileContent(meta, args, fetcher = fetch) {
         (response.headers.get('content-type') ?? 'unknown').split(';')[0] +
         ').',
     );
-  const extracted = await extractBytes(
+  const extracted = await extractOrExplain(
     await boundedBytes(response),
     base.name ?? '',
     base.mime_type ?? response.headers.get('content-type') ?? '',
     { entry: args.entry, storedName: meta.filename },
+    'Call canvas_file_original with this file_id to get the file itself, or open html_url.',
   );
   return paginated(base, extracted, args);
 }

package/find-files.mjs

@@ -180,14 +180,24 @@ export async function findFiles(args, token, fetcher) {
     return canvasGet(u, token, fetcher);
   };
   const searched = {};
-  // One source failing (hidden, not enabled) is normal; an expired token stops everything.
+  // A source being hidden or not enabled (401/403/404) is normal. A source that failed (timeout,
+  // network, rate limit, Canvas error) was not searched: the result is then incomplete, and if
+  // nothing could be searched at all the error is passed on instead of an empty "complete" list.
+  // An expired token or an HTML error page (Canvas down, a firewall) stops everything.
+  const failures = [];
+  const hidden = e => [401, 403, 404].includes(e.status);
   const attempt = async (source, run) => {
     try {
       const n = await run();
       searched[source] = n === undefined ? 'ok' : `ok (${n})`;
     } catch (e) {
       if (/authorization expired|HTML error page/.test(e.message ?? '')) throw e;
-      searched[source] = e.status ? `not available (HTTP ${e.status})` : 'failed';
+      if (hidden(e)) searched[source] = `not available (HTTP ${e.status})`;
+      else {
+        failures.push(e);
+        complete = false;
+        searched[source] = e.status ? `failed (HTTP ${e.status})` : 'failed';
+      }
     }
   };
   const pagesOf = async (path, query, maxPages, each) => {
@@ -337,7 +347,8 @@ export async function findFiles(args, token, fetcher) {
 
   // Pages linked from everything above, breadth first, never outside this course.
   let pagesRead = 0,
-    pagesUnavailable = 0;
+    pagesUnavailable = 0,
+    pagesFailed = 0;
   while (queue.length) {
     const batch = queue.splice(0, PAGE_BATCH).filter(slug => !read.has(slug));
     await Promise.all(
@@ -355,7 +366,12 @@ export async function findFiles(args, token, fetcher) {
           });
         } catch (e) {
           if (/authorization expired|HTML error page/.test(e.message ?? '')) throw e;
-          pagesUnavailable++;
+          if (hidden(e)) pagesUnavailable++;
+          else {
+            failures.push(e);
+            complete = false;
+            pagesFailed++;
+          }
         }
       }),
     );
@@ -365,7 +381,20 @@ export async function findFiles(args, token, fetcher) {
     }
   }
   searched.linked_pages =
-    `${pagesRead} read` + (pagesUnavailable ? `, ${pagesUnavailable} not available` : '');
+    `${pagesRead} read` +
+    (pagesUnavailable ? `, ${pagesUnavailable} not available` : '') +
+    (pagesFailed ? `, ${pagesFailed} failed` : '');
+  const sources = Object.entries(searched).filter(([k]) => k !== 'linked_pages');
+  // Nothing could be searched: say why instead of "no files, complete".
+  if (failures.length && !pagesRead && !sources.some(([, v]) => v.startsWith('ok'))) {
+    const e = failures.find(x => /^Canvas/.test(x.message ?? '')) ?? failures[0];
+    throw /^Canvas/.test(e.message ?? '')
+      ? e
+      : new Error(`Canvas could not be searched (${e.name}). Try again in a minute.`);
+  }
+  // Every source 404: most likely not a course this user is in.
+  const wrongCourse =
+    !files.size && sources.length && sources.every(([, v]) => v === 'not available (HTTP 404)');
 
   let list = [...files.values()];
   let matchedOn = null;
@@ -393,11 +422,21 @@ export async function findFiles(args, token, fetcher) {
     external_links: ext,
     searched,
     complete,
-    ...(complete
-      ? {}
-      : {
-          note: `Stopped after ${requests} Canvas requests; some linked pages or lists were not searched. Open more pages with canvas_context_page or canvas_module_items if the file is not listed.`,
-        }),
+    ...(failures.length
+      ? {
+          note: `Some places could not be searched (they failed, see searched: ${failures.length} failed request${failures.length > 1 ? 's' : ''}), so a file missing here may still exist. Try again in a minute before telling the user it is not there.`,
+        }
+      : complete
+        ? {}
+        : {
+            note: `Stopped after ${requests} Canvas requests; some linked pages or lists were not searched. Open more pages with canvas_context_page or canvas_module_items if the file is not listed.`,
+          }),
+    ...(wrongCourse
+      ? {
+          course_note:
+            'Every part of this course answered 404: check the course_id (canvas_courses lists the user’s courses).',
+        }
+      : {}),
     how_to_read:
       'Read a file_id with canvas_file_content (text from PDF/Office/code, ZIP listing and contents) or canvas_file_original (original bytes, e.g. scanned PDFs). An external link with read_with (a module item): call canvas_module_file_content with those IDs for its text (Google Docs/Slides/Sheets/Drive, Dropbox, GitHub), or canvas_module_file for the original file. Other external links cannot be read by this connector: give the user the link.',
   };

package/i18n.mjs

@@ -15,15 +15,12 @@ const S = {
   en: {
     product: 'Neuro-CanvasLMS',
     tagline: 'Your Canvas, readable by your own AI assistant.',
-    home_lead:
-      'A private, read-only bridge between your Canvas account and Claude or ChatGPT. Ask about deadlines, grades, lecture files and announcements in plain language.',
     status_bound: 'Connected to its owner',
     status_unbound: 'Not connected yet',
     home_add_title: 'Add it to your assistant',
-    home_add_body: 'In Claude or ChatGPT, add a custom connector with this address:',
-    home_safe: 'Read-only. It never submits work, sends messages or changes anything in Canvas.',
     canvas_site: 'Canvas site',
     auth_title: 'Connect your {school} Canvas',
+    auth_title_plain: 'Connect your Canvas',
     auth_lead: 'Let your own AI assistant read what you can already see in Canvas.',
     read_only: 'Read-only',
     scopes_title: 'What it can read',
@@ -34,6 +31,7 @@ const S = {
     token_placeholder: 'Paste your token here',
     token_how:
       'Create one in Canvas: Account → Settings → New Access Token. Copy it right away — Canvas shows it only once.',
+    token_open: 'Open Canvas settings',
     token_privacy:
       'The token goes only to this Worker (which you deployed) and to Canvas, then is stored encrypted inside the authorization. Your school may limit tokens to 30 days; when it expires, reconnect with a new one.',
     consent: 'I allow this AI assistant to read the Canvas data listed above.',
@@ -47,23 +45,37 @@ const S = {
       'It is already bound to a different Canvas account. Deploy your own copy to use it.',
     client_title: 'Unsupported app',
     client_body: 'Only Claude, ChatGPT and local AI clients can connect to this connector.',
+    expired_title: 'This page has expired',
+    expired_body:
+      'The page was open too long, or was opened again in another tab. Go back and paste your token again.',
+    down_title: 'Canvas is not answering right now',
+    down_hint:
+      'Your token is probably fine: Canvas is slow, down for maintenance, or could not be reached. Wait a few minutes, then go back and try again.',
     footer: 'Open source · read-only · runs on your own Cloudflare account',
     version_label: 'Version',
     not_configured: 'Not configured yet. Run the installer.',
     language: 'Language',
+    token_path: 'Account → Settings → + New Access Token',
+    step_token: 'Token',
+    step_consent: 'Consent',
+    step_authorize: 'Authorize',
+    next: 'Continue',
+    skip: 'Skip',
+    token_got: 'Token received',
+    thanks_title: 'Thank you',
+    thanks_body: 'Connecting your Canvas to your AI…',
+    subjects:
+      'Calculus|Linear Algebra|Organic Chemistry|Cell Biology|Quantum Mechanics|Macroeconomics|Data Structures|Statistics|Psychology|World History|Philosophy|Literature|Linguistics|Music Theory|Art History|Political Science',
   },
   'zh-CN': {
     product: 'Neuro-CanvasLMS',
     tagline: '让你自己的 AI 助手读懂你的 Canvas。',
-    home_lead:
-      '在你的 Canvas 账号与 Claude 或 ChatGPT 之间建立一条私人的只读通道。用日常语言询问截止日期、成绩、讲义文件和课程公告。',
     status_bound: '已绑定所有者',
     status_unbound: '还没有连接',
     home_add_title: '添加到你的 AI 助手',
-    home_add_body: '在 Claude 或 ChatGPT 中添加自定义连接器，地址填写：',
-    home_safe: '只读。不会提交作业、发送消息，也不会修改 Canvas 中的任何内容。',
     canvas_site: 'Canvas 站点',
     auth_title: '连接你的 {school} Canvas',
+    auth_title_plain: '连接你的 Canvas',
     auth_lead: '让你自己的 AI 助手读取你在 Canvas 中本来就能看到的内容。',
     read_only: '只读',
     scopes_title: '可读取的内容',
@@ -73,6 +85,7 @@ const S = {
     token_label: 'Canvas 访问令牌',
     token_placeholder: '在此粘贴令牌',
     token_how: '在 Canvas 中创建：账户 → 设置 → 新建访问许可证。请立即复制——Canvas 只显示一次。',
+    token_open: '打开 Canvas 设置',
     token_privacy:
       '令牌只会发送到这个由你自己部署的 Worker 和 Canvas，并加密保存在授权记录中。学校可能限制令牌最长 30 天有效，过期后用新令牌重新连接即可。',
     consent: '我允许该 AI 助手读取上面列出的 Canvas 信息。',
@@ -84,23 +97,35 @@ const S = {
     owner_body: '它已绑定到另一个 Canvas 账号。如需使用，请部署你自己的副本。',
     client_title: '不支持的应用',
     client_body: '只有 Claude、ChatGPT 和本地 AI 客户端可以连接此连接器。',
+    expired_title: '页面已过期',
+    expired_body: '这个页面打开太久了，或者在另一个标签页里又打开过一次。请返回，重新粘贴令牌。',
+    down_title: 'Canvas 暂时没有响应',
+    down_hint: '令牌多半没有问题：Canvas 现在很慢、正在维护，或者连不上。等几分钟后返回重试。',
     footer: '开源 · 只读 · 运行在你自己的 Cloudflare 账号上',
     version_label: '版本',
     not_configured: '还没配置，请运行安装向导。',
     language: '语言',
+    token_path: '账户 → 设置 → 新建访问许可证',
+    step_token: '令牌',
+    step_consent: '同意',
+    step_authorize: '授权',
+    next: '继续',
+    skip: '跳过',
+    token_got: '已收到令牌',
+    thanks_title: '谢谢',
+    thanks_body: '正在把你的 Canvas 接入你的 AI 助手…',
+    subjects:
+      '微积分|线性代数|有机化学|细胞生物学|量子力学|宏观经济学|数据结构|统计学|心理学|世界史|哲学|文学|语言学|乐理|艺术史|政治学',
   },
   es: {
     product: 'Neuro-CanvasLMS',
     tagline: 'Tu Canvas, al alcance de tu propio asistente de IA.',
-    home_lead:
-      'Un puente privado y de solo lectura entre tu cuenta de Canvas y Claude o ChatGPT. Pregunta por fechas de entrega, calificaciones, apuntes y anuncios en lenguaje natural.',
     status_bound: 'Vinculado a su propietario',
     status_unbound: 'Aún no conectado',
     home_add_title: 'Añádelo a tu asistente',
-    home_add_body: 'En Claude o ChatGPT, añade un conector personalizado con esta dirección:',
-    home_safe: 'Solo lectura. Nunca entrega tareas, envía mensajes ni modifica nada en Canvas.',
     canvas_site: 'Sitio de Canvas',
     auth_title: 'Conecta tu Canvas de {school}',
+    auth_title_plain: 'Conecta tu Canvas',
     auth_lead: 'Permite que tu propio asistente de IA lea lo que ya puedes ver en Canvas.',
     read_only: 'Solo lectura',
     scopes_title: 'Qué puede leer',
@@ -111,6 +136,7 @@ const S = {
     token_placeholder: 'Pega tu token aquí',
     token_how:
       'Créalo en Canvas: Cuenta → Configuración → Nuevo token de acceso. Cópialo enseguida: Canvas solo lo muestra una vez.',
+    token_open: 'Abrir la configuración de Canvas',
     token_privacy:
       'El token solo se envía a este Worker (que tú desplegaste) y a Canvas, y se guarda cifrado dentro de la autorización. Tu universidad puede limitar los tokens a 30 días; cuando caduque, vuelve a conectar con uno nuevo.',
     consent: 'Permito que este asistente de IA lea los datos de Canvas indicados arriba.',
@@ -123,24 +149,37 @@ const S = {
     owner_body: 'Ya está vinculado a otra cuenta de Canvas. Despliega tu propia copia para usarlo.',
     client_title: 'Aplicación no compatible',
     client_body: 'Solo Claude, ChatGPT y clientes de IA locales pueden conectarse.',
+    expired_title: 'La página ha caducado',
+    expired_body:
+      'La página estuvo abierta demasiado tiempo o se volvió a abrir en otra pestaña. Vuelve y pega tu token de nuevo.',
+    down_title: 'Canvas no responde ahora mismo',
+    down_hint:
+      'Seguramente tu token está bien: Canvas va lento, está en mantenimiento o no se pudo contactar. Espera unos minutos, luego vuelve e inténtalo de nuevo.',
     footer: 'Código abierto · solo lectura · en tu propia cuenta de Cloudflare',
     version_label: 'Versión',
     not_configured: 'Aún no configurado. Ejecuta el instalador.',
     language: 'Idioma',
+    token_path: 'Cuenta → Configuración → + Nuevo token de acceso',
+    step_token: 'Token',
+    step_consent: 'Consentimiento',
+    step_authorize: 'Autorizar',
+    next: 'Continuar',
+    skip: 'Saltar',
+    token_got: 'Token recibido',
+    thanks_title: 'Gracias',
+    thanks_body: 'Conectando tu Canvas con tu IA…',
+    subjects:
+      'Cálculo|Álgebra lineal|Química orgánica|Biología celular|Mecánica cuántica|Macroeconomía|Estructuras de datos|Estadística|Psicología|Historia universal|Filosofía|Literatura|Lingüística|Teoría musical|Historia del arte|Ciencia política',
   },
   ja: {
     product: 'Neuro-CanvasLMS',
     tagline: 'あなたの Canvas を、あなた自身の AI アシスタントに。',
-    home_lead:
-      'Canvas アカウントと Claude / ChatGPT をつなぐ、個人用の読み取り専用ブリッジです。締め切り、成績、講義資料、お知らせを普段の言葉で質問できます。',
     status_bound: '所有者と連携済み',
     status_unbound: 'まだ接続されていません',
     home_add_title: 'アシスタントに追加する',
-    home_add_body:
-      'Claude または ChatGPT で、次のアドレスをカスタムコネクタとして追加してください：',
-    home_safe: '読み取り専用です。課題の提出、メッセージ送信、Canvas 上の変更は一切行いません。',
     canvas_site: 'Canvas サイト',
     auth_title: '{school} の Canvas を接続',
+    auth_title_plain: 'Canvas を接続',
     auth_lead:
       'Canvas であなたがすでに閲覧できる内容を、あなた自身の AI アシスタントが読めるようにします。',
     read_only: '読み取り専用',
@@ -152,6 +191,7 @@ const S = {
     token_placeholder: 'ここにトークンを貼り付け',
     token_how:
       'Canvas で作成：アカウント → 設定 → 新しいアクセストークン。表示は一度きりなので、すぐにコピーしてください。',
+    token_open: 'Canvas の設定を開く',
     token_privacy:
       'トークンはあなたがデプロイしたこの Worker と Canvas にのみ送信され、認可情報の中に暗号化して保存されます。学校によっては有効期限が最長 30 日です。期限切れの際は新しいトークンで再接続してください。',
     consent: '上記の Canvas データをこの AI アシスタントが読み取ることを許可します。',
@@ -165,24 +205,37 @@ const S = {
       'すでに別の Canvas アカウントに紐づいています。利用するにはご自身でデプロイしてください。',
     client_title: '対応していないアプリです',
     client_body: '接続できるのは Claude、ChatGPT、ローカルの AI クライアントのみです。',
+    expired_title: 'ページの有効期限が切れました',
+    expired_body:
+      'ページを長く開いたままにしたか、別のタブで開き直しました。戻って、もう一度トークンを貼り付けてください。',
+    down_title: 'Canvas が今は応答していません',
+    down_hint:
+      'トークンはおそらく問題ありません。Canvas が遅いか、メンテナンス中か、接続できませんでした。数分待ってから、戻ってもう一度お試しください。',
     footer: 'オープンソース · 読み取り専用 · あなたの Cloudflare アカウントで動作',
     version_label: 'バージョン',
     not_configured: '未設定です。インストーラーを実行してください。',
     language: '言語',
+    token_path: 'アカウント → 設定 → 新しいアクセストークン',
+    step_token: 'トークン',
+    step_consent: '同意',
+    step_authorize: '認可',
+    next: '次へ',
+    skip: 'スキップ',
+    token_got: 'トークンを受け取りました',
+    thanks_title: 'ありがとうございます',
+    thanks_body: 'Canvas を AI に接続しています…',
+    subjects:
+      '微分積分|線形代数|有機化学|細胞生物学|量子力学|マクロ経済学|データ構造|統計学|心理学|世界史|哲学|文学|言語学|音楽理論|美術史|政治学',
   },
   hi: {
     product: 'Neuro-CanvasLMS',
     tagline: 'आपका Canvas, आपके अपने AI सहायक के लिए।',
-    home_lead:
-      'आपके Canvas खाते और Claude या ChatGPT के बीच एक निजी, केवल-पढ़ने वाला पुल। समय-सीमा, ग्रेड, लेक्चर फ़ाइलों और घोषणाओं के बारे में सामान्य भाषा में पूछें।',
     status_bound: 'अपने स्वामी से जुड़ा हुआ',
     status_unbound: 'अभी तक कनेक्ट नहीं हुआ',
     home_add_title: 'इसे अपने सहायक में जोड़ें',
-    home_add_body: 'Claude या ChatGPT में इस पते के साथ एक कस्टम कनेक्टर जोड़ें:',
-    home_safe:
-      'केवल पढ़ने के लिए। यह कभी असाइनमेंट जमा नहीं करता, संदेश नहीं भेजता और Canvas में कुछ नहीं बदलता।',
     canvas_site: 'Canvas साइट',
     auth_title: 'अपना {school} Canvas जोड़ें',
+    auth_title_plain: 'अपना Canvas जोड़ें',
     auth_lead: 'Canvas में जो आप पहले से देख सकते हैं, उसे अपने AI सहायक को पढ़ने दें।',
     read_only: 'केवल पढ़ना',
     scopes_title: 'यह क्या पढ़ सकता है',
@@ -193,6 +246,7 @@ const S = {
     token_placeholder: 'अपना टोकन यहाँ चिपकाएँ',
     token_how:
       'Canvas में बनाएँ: Account → Settings → New Access Token. तुरंत कॉपी करें — Canvas इसे केवल एक बार दिखाता है।',
+    token_open: 'Canvas सेटिंग्स खोलें',
     token_privacy:
       'टोकन केवल इस Worker (जिसे आपने डिप्लॉय किया है) और Canvas को भेजा जाता है, फिर प्राधिकरण के अंदर एन्क्रिप्ट करके रखा जाता है। आपका संस्थान टोकन को 30 दिनों तक सीमित कर सकता है; समाप्त होने पर नए टोकन से फिर से जोड़ें।',
     consent: 'मैं इस AI सहायक को ऊपर बताए गए Canvas डेटा को पढ़ने की अनुमति देता/देती हूँ।',
@@ -206,10 +260,27 @@ const S = {
       'यह पहले से किसी दूसरे Canvas खाते से जुड़ा है। इसे इस्तेमाल करने के लिए अपनी खुद की कॉपी डिप्लॉय करें।',
     client_title: 'असमर्थित ऐप',
     client_body: 'केवल Claude, ChatGPT और लोकल AI क्लाइंट ही इस कनेक्टर से जुड़ सकते हैं।',
+    expired_title: 'पेज की अवधि समाप्त हो गई',
+    expired_body:
+      'यह पेज बहुत देर तक खुला रहा, या किसी दूसरे टैब में फिर से खोला गया। वापस जाएँ और अपना टोकन फिर से चिपकाएँ।',
+    down_title: 'Canvas अभी जवाब नहीं दे रहा',
+    down_hint:
+      'आपका टोकन शायद ठीक है: Canvas धीमा है, रखरखाव में है, या उससे संपर्क नहीं हो सका। कुछ मिनट रुकें, फिर वापस जाकर दोबारा कोशिश करें।',
     footer: 'ओपन सोर्स · केवल पढ़ना · आपके अपने Cloudflare खाते पर चलता है',
     version_label: 'संस्करण',
     not_configured: 'अभी कॉन्फ़िगर नहीं है। इंस्टॉलर चलाएँ।',
     language: 'भाषा',
+    token_path: 'Account → Settings → + New Access Token',
+    step_token: 'टोकन',
+    step_consent: 'सहमति',
+    step_authorize: 'अनुमति',
+    next: 'आगे बढ़ें',
+    skip: 'छोड़ें',
+    token_got: 'टोकन मिल गया',
+    thanks_title: 'धन्यवाद',
+    thanks_body: 'आपका Canvas आपके AI से जोड़ा जा रहा है…',
+    subjects:
+      'कलन|रैखिक बीजगणित|कार्बनिक रसायन|कोशिका जीवविज्ञान|क्वांटम यांत्रिकी|समष्टि अर्थशास्त्र|डेटा संरचनाएँ|सांख्यिकी|मनोविज्ञान|विश्व इतिहास|दर्शनशास्त्र|साहित्य|भाषाविज्ञान|संगीत सिद्धांत|कला इतिहास|राजनीति विज्ञान',
   },
 };