neuro-canvas-lms 2.13.0 → 2.13.1

package/AGENTS.md

@@ -39,3 +39,8 @@ Code map:
   settings (without a terminal it does not ask). `installer/verify.mjs`: the post-deploy online
   check, also run alone by `npx -y neuro-canvas-lms check`.
 - `version.mjs`: shown on the home page and /healthz, compared with npm by update-check.mjs.
+- `server.json`: the entry in the official MCP Registry (one remote whose host each user fills in).
+  Same version as `version.mjs` and package.json (`version.test.mjs`).
+- Releases: bump those three, push to main, then push a tag `vX.Y.Z`;
+  `.github/workflows/publish.yml` tests, publishes to npm and updates the MCP Registry, with
+  no stored secrets (OIDC trusted publishing).

package/README.md

@@ -2,6 +2,8 @@
 
 **English** · [简体中文](docs/README.zh-CN.md) · [Español](docs/README.es.md) · [日本語](docs/README.ja.md) · [हिन्दी](docs/README.hi.md)
 
+[![npm](https://img.shields.io/npm/v/neuro-canvas-lms?label=npm&color=c9a462)](https://www.npmjs.com/package/neuro-canvas-lms) [![tests](https://github.com/BloodyReginaa/Neuro-CanvasLMS/actions/workflows/test.yml/badge.svg)](https://github.com/BloodyReginaa/Neuro-CanvasLMS/actions/workflows/test.yml) [![license: MIT](https://img.shields.io/badge/license-MIT-blue)](https://github.com/BloodyReginaa/Neuro-CanvasLMS/blob/main/LICENSE)
+
 ![Neuro-CanvasLMS answering "What's due this week?" in Claude](https://raw.githubusercontent.com/BloodyReginaa/Neuro-CanvasLMS/main/docs/images/banner.png)
 
 **Wire your Canvas LMS straight into Claude and ChatGPT.** Your courses, deadlines, grades and lecture files become part of what your AI knows, in any chat and on any device. It is a read-only remote MCP server that one command deploys to your own free Cloudflare account. Works at any Canvas school that lets students create access tokens ([30-second check](#can-you-use-it)).

package/canvas-transport.mjs

@@ -135,9 +135,12 @@ export async function parseCanvasResponse(bytes) {
 }
 // A JSON answer is Canvas itself speaking; HTML (or a 406) means something in front of Canvas
 // rejected the request, which is when the socket path is worth trying.
+// A rate limit (429, or Canvas's own 403 carrying X-Rate-Limit-Remaining) is Canvas speaking too:
+// asking again at once over the socket would only add to the count.
 export function shouldFallBack(response) {
   if (response.status === 406) return true;
-  if (response.status < 400) return false;
+  if (response.status < 400 || response.status === 429) return false;
+  if (response.headers.has('x-rate-limit-remaining')) return false;
   return !(response.headers.get('content-type') ?? '').toLowerCase().includes('json');
 }
 

package/canvas.mjs

@@ -246,6 +246,36 @@ export function unreachable(e) {
 
 // One GET to the Canvas API: fixed headers, no redirects, Canvas errors turned into safe messages
 // (never the upstream body). `e.status` is set when Canvas refused this item (not a token problem).
+// Canvas throttles API use per token: it answers "403 Forbidden (Rate Limit Exceeded)" (its own
+// answers carry X-Rate-Limit-Remaining), and a proxy in front may answer 429. That is not "this
+// course hides its files" (no find_files hint, no retry over the socket): the AI is told to wait.
+// The error has no `status`, so nothing treats it as a hidden resource.
+async function rateLimit(r) {
+  if (r.status !== 429 && r.status !== 403) return null;
+  let limited = r.status === 429;
+  if (!limited) {
+    const remaining = r.headers.get('x-rate-limit-remaining');
+    if (remaining !== null && Number(remaining) <= 0) limited = true;
+    else if (!(r.headers.get('content-type') ?? '').includes('json'))
+      try {
+        limited = /rate limit/i.test((await r.clone().text()).slice(0, 2000));
+      } catch {}
+  }
+  if (!limited) return null;
+  await r.body?.cancel().catch(() => {});
+  const seconds = Number(r.headers.get('retry-after'));
+  const wait =
+    Number.isFinite(seconds) && seconds > 0
+      ? `${Math.min(Math.ceil(seconds), 3600)} seconds`
+      : 'about a minute';
+  return Object.assign(
+    new Error(
+      `Canvas rate limit reached (HTTP ${r.status}): too many Canvas requests in a short time. Wait ${wait} before the next Canvas call and do not retry in a loop. The token and the connection are fine; this is not a permission problem.`,
+    ),
+    { rateLimited: true },
+  );
+}
+
 export async function canvasGet(u, token, fetcher = fetch) {
   let r;
   try {
@@ -262,6 +292,8 @@ export async function canvasGet(u, token, fetcher = fetch) {
   } catch (e) {
     throw unreachable(e);
   }
+  const limited = await rateLimit(r);
+  if (limited) throw limited;
   if (
     r.status === 406 ||
     (r.status >= 500 && !(r.headers.get('content-type') ?? '').includes('json'))

package/download-link.mjs

@@ -160,12 +160,20 @@ export function newDownloadId() {
     .replace(/=+$/, '');
 }
 
+// Cloudflare KV failed (briefly unavailable, or the free plan's 1000 writes a day are used up).
+export const STORAGE_DOWN =
+  "Connector storage (Cloudflare KV) is unavailable right now, so no download link could be made. It is often the free plan's daily KV limit, which resets at 00:00 UTC. Meanwhile use canvas_file_original or canvas_file_content; the Canvas connection itself is fine.";
+
 // Store the Canvas address for 5 minutes and return the Worker link that leads to it.
 export async function issueDownload(kv, origin, target, now = Date.now) {
   const id = newDownloadId();
-  await kv.put('dl:' + id, JSON.stringify({ target, exp: now() + DOWNLOAD_TTL * 1000 }), {
-    expirationTtl: DOWNLOAD_TTL,
-  });
+  try {
+    await kv.put('dl:' + id, JSON.stringify({ target, exp: now() + DOWNLOAD_TTL * 1000 }), {
+      expirationTtl: DOWNLOAD_TTL,
+    });
+  } catch {
+    throw new Error(STORAGE_DOWN);
+  }
   return `${origin}/dl/${id}`;
 }
 
@@ -188,11 +196,22 @@ export async function redeemDownload(request, kv, id, now = Date.now) {
       { status: 403, headers: plain },
     );
   const key = 'dl:' + id;
+  let stored;
+  try {
+    stored = await kv.get(key);
+  } catch {
+    // not "expired": the link may be fine, the storage is not
+    return new Response(
+      "The connector's storage (Cloudflare KV) is unavailable right now. Try again in a minute; if it keeps failing, the free plan's daily limit may be used up (it resets at 00:00 UTC).\n",
+      { status: 503, headers: plain },
+    );
+  }
   let entry = null;
   try {
-    entry = JSON.parse((await kv.get(key)) ?? 'null');
+    entry = JSON.parse(stored ?? 'null');
   } catch {}
-  if (entry) await kv.delete(key);
+  // Used up before it is used: a failed delete does not stop this download (it still expires).
+  if (entry) await kv.delete(key).catch(() => {});
   // KV expiry can lag a little: the stored deadline is checked too.
   if (!entry?.target || !(now() < entry.exp))
     return new Response(

package/find-files.mjs

@@ -183,15 +183,17 @@ export async function findFiles(args, token, fetcher) {
   // A source being hidden or not enabled (401/403/404) is normal. A source that failed (timeout,
   // network, rate limit, Canvas error) was not searched: the result is then incomplete, and if
   // nothing could be searched at all the error is passed on instead of an empty "complete" list.
-  // An expired token or an HTML error page (Canvas down, a firewall) stops everything.
+  // An expired token, a rate limit or an HTML error page (Canvas down, a firewall) stops everything.
   const failures = [];
   const hidden = e => [401, 403, 404].includes(e.status);
+  const stops = e =>
+    e.rateLimited || /authorization expired|HTML error page/.test(e?.message ?? '');
   const attempt = async (source, run) => {
     try {
       const n = await run();
       searched[source] = n === undefined ? 'ok' : `ok (${n})`;
     } catch (e) {
-      if (/authorization expired|HTML error page/.test(e.message ?? '')) throw e;
+      if (stops(e)) throw e;
       if (hidden(e)) searched[source] = `not available (HTTP ${e.status})`;
       else {
         failures.push(e);
@@ -365,7 +367,7 @@ export async function findFiles(args, token, fetcher) {
             page_url: r.data?.url ?? slug,
           });
         } catch (e) {
-          if (/authorization expired|HTML error page/.test(e.message ?? '')) throw e;
+          if (stops(e)) throw e;
           if (hidden(e)) pagesUnavailable++;
           else {
             failures.push(e);

package/i18n.mjs

@@ -51,6 +51,9 @@ const S = {
     down_title: 'Canvas is not answering right now',
     down_hint:
       'Your token is probably fine: Canvas is slow, down for maintenance, or could not be reached. Wait a few minutes, then go back and try again.',
+    busy_title: 'Something went wrong on your connector',
+    busy_body:
+      "Usually its Cloudflare storage is briefly unavailable, or the free plan's daily storage limit is used up (it resets at 00:00 UTC). Your token and your connection are not affected. Try again later.",
     footer: 'Open source · read-only · runs on your own Cloudflare account',
     version_label: 'Version',
     not_configured: 'Not configured yet. Run the installer.',
@@ -101,6 +104,9 @@ const S = {
     expired_body: '这个页面打开太久了，或者在另一个标签页里又打开过一次。请返回，重新粘贴令牌。',
     down_title: 'Canvas 暂时没有响应',
     down_hint: '令牌多半没有问题：Canvas 现在很慢、正在维护，或者连不上。等几分钟后返回重试。',
+    busy_title: '你的连接器出了点问题',
+    busy_body:
+      '通常是它的 Cloudflare 存储暂时不可用，或者免费版当天的存储额度用完了（每天 UTC 0 点重置）。你的令牌和已有的连接都不受影响，请稍后再试。',
     footer: '开源 · 只读 · 运行在你自己的 Cloudflare 账号上',
     version_label: '版本',
     not_configured: '还没配置，请运行安装向导。',
@@ -155,6 +161,9 @@ const S = {
     down_title: 'Canvas no responde ahora mismo',
     down_hint:
       'Seguramente tu token está bien: Canvas va lento, está en mantenimiento o no se pudo contactar. Espera unos minutos, luego vuelve e inténtalo de nuevo.',
+    busy_title: 'Algo salió mal en tu conector',
+    busy_body:
+      'Normalmente su almacenamiento de Cloudflare no está disponible por un momento, o se agotó el límite diario del plan gratuito (se reinicia a las 00:00 UTC). Tu token y tu conexión no se ven afectados. Inténtalo más tarde.',
     footer: 'Código abierto · solo lectura · en tu propia cuenta de Cloudflare',
     version_label: 'Versión',
     not_configured: 'Aún no configurado. Ejecuta el instalador.',
@@ -211,6 +220,9 @@ const S = {
     down_title: 'Canvas が今は応答していません',
     down_hint:
       'トークンはおそらく問題ありません。Canvas が遅いか、メンテナンス中か、接続できませんでした。数分待ってから、戻ってもう一度お試しください。',
+    busy_title: 'コネクタで問題が発生しました',
+    busy_body:
+      '多くの場合、Cloudflare のストレージが一時的に使えないか、無料プランの 1 日あたりのストレージ上限に達しています（UTC 0:00 にリセット）。トークンと接続には影響ありません。しばらくしてからもう一度お試しください。',
     footer: 'オープンソース · 読み取り専用 · あなたの Cloudflare アカウントで動作',
     version_label: 'バージョン',
     not_configured: '未設定です。インストーラーを実行してください。',
@@ -266,6 +278,9 @@ const S = {
     down_title: 'Canvas अभी जवाब नहीं दे रहा',
     down_hint:
       'आपका टोकन शायद ठीक है: Canvas धीमा है, रखरखाव में है, या उससे संपर्क नहीं हो सका। कुछ मिनट रुकें, फिर वापस जाकर दोबारा कोशिश करें।',
+    busy_title: 'आपके कनेक्टर में कुछ गड़बड़ हुई',
+    busy_body:
+      'आम तौर पर इसका Cloudflare स्टोरेज कुछ देर के लिए उपलब्ध नहीं होता, या फ़्री प्लान की रोज़ की स्टोरेज सीमा खत्म हो गई है (यह 00:00 UTC पर रीसेट होती है)। आपका टोकन और कनेक्शन प्रभावित नहीं हैं। बाद में फिर से कोशिश करें।',
     footer: 'ओपन सोर्स · केवल पढ़ना · आपके अपने Cloudflare खाते पर चलता है',
     version_label: 'संस्करण',
     not_configured: 'अभी कॉन्फ़िगर नहीं है। इंस्टॉलर चलाएँ।',

package/installer/cli.mjs

@@ -6,7 +6,8 @@
 // Running it again updates the connector to the code you are running and keeps its storage, so
 // existing Claude/ChatGPT connections keep working.
 // Language: your system language if supported (en, zh, es, ja, hi), else English; --lang to choose.
-// Automation/tests: --name, --canvas-host, --school, --account-id, --yes; env NCLMS_HOME, NCLMS_LANG.
+// Automation/tests: --name, --canvas-host, --school, --account-id, --yes; env NCLMS_HOME, NCLMS_LANG
+// (tests only: NCLMS_WRANGLER, a stand-in for wrangler's bin script).
 // Exit codes: 0 done, 1 failed, 2 deployed but not confirmed online yet (run `check` later).
 import { spawnSync } from 'node:child_process';
 import { createRequire } from 'node:module';
@@ -40,12 +41,16 @@ import { ensureSubdomain } from './subdomain.mjs';
 
 const ROOT = path.resolve(fileURLToPath(new URL('..', import.meta.url)));
 // wrangler's package "exports" hide bin/; find the package root from its main entry instead.
-const WRANGLER = (() => {
-  let dir = path.dirname(createRequire(import.meta.url).resolve('wrangler'));
-  while (path.basename(dir) !== 'wrangler' || !fs.existsSync(path.join(dir, 'package.json')))
-    dir = path.dirname(dir);
-  return path.join(dir, 'bin', 'wrangler.js');
-})();
+const WRANGLER =
+  process.env.NCLMS_WRANGLER ||
+  (() => {
+    let dir = path.dirname(createRequire(import.meta.url).resolve('wrangler'));
+    while (path.basename(dir) !== 'wrangler' || !fs.existsSync(path.join(dir, 'package.json'))) {
+      if (path.dirname(dir) === dir) throw new Error('wrangler is not installed');
+      dir = path.dirname(dir);
+    }
+    return path.join(dir, 'bin', 'wrangler.js');
+  })();
 const HOME = process.env.NCLMS_HOME || path.join(os.homedir(), '.neuro-canvas-lms');
 const args = parseArgs(process.argv.slice(2));
 function systemLanguages() {
@@ -67,7 +72,9 @@ const fail = detail => {
 };
 
 let accountEnv = {};
-function wrangler(argv, { cwd, inherit, timeout } = {}) {
+// Every wrangler step has a time limit (a hung network must not hang the installer); only the
+// interactive login waits as long as the user needs.
+function wrangler(argv, { cwd, inherit, timeout = inherit ? undefined : 2 * 60 * 1000 } = {}) {
   const r = spawnSync(process.execPath, [WRANGLER, ...argv], {
     cwd,
     encoding: 'utf8',
@@ -75,7 +82,37 @@ function wrangler(argv, { cwd, inherit, timeout } = {}) {
     timeout,
     env: { ...process.env, WRANGLER_SEND_METRICS: 'false', ...accountEnv },
   });
-  return { ok: r.status === 0, out: `${r.stdout ?? ''}${r.stderr ?? ''}`, stdout: r.stdout ?? '' };
+  let out = `${r.stdout ?? ''}${r.stderr ?? ''}`;
+  if (r.error?.code === 'ETIMEDOUT') out += '\n' + msg(lang, 'timed_out', { s: timeout / 1000 });
+  return { ok: r.status === 0, out, stdout: r.stdout ?? '' };
+}
+// JSON that wrangler printed on stdout (warnings and banners go to stderr, or come before it).
+function stdoutJson(r, open) {
+  try {
+    return JSON.parse(r.stdout.slice(r.stdout.indexOf(open)));
+  } catch {
+    return null;
+  }
+}
+
+// The local install record. A damaged file is moved aside (and said so) instead of failing every
+// run with the same JSON error; it is written to a temporary file first, then renamed, so an
+// interrupted write cannot damage it.
+function readState(statePath) {
+  if (!fs.existsSync(statePath)) return {};
+  try {
+    const state = JSON.parse(fs.readFileSync(statePath, 'utf8'));
+    if (state && typeof state === 'object' && !Array.isArray(state)) return state;
+  } catch {}
+  const moved = `${statePath}.damaged-${Date.now()}`;
+  fs.renameSync(statePath, moved);
+  say('state_broken', { moved });
+  return {};
+}
+function writeState(statePath, state) {
+  const tmp = `${statePath}.tmp`;
+  fs.writeFileSync(tmp, JSON.stringify(state, null, 2));
+  fs.renameSync(tmp, statePath);
 }
 // A failed wrangler step: an unverified Cloudflare email gets its own clear message.
 const failStep = (what, out) =>
@@ -140,12 +177,13 @@ async function ensureLogin(saved) {
     }
     if (!who.ok) fail(msg(lang, 'login_failed'));
   }
-  const info = JSON.parse(who.out.slice(who.out.indexOf('{')));
+  const info = stdoutJson(who, '{');
+  if (!info) failStep('wrangler whoami', who.out);
   ok('logged_in', { email: info.email ?? '' });
   const accounts = info.accounts ?? [];
   if (args.accountId) return args.accountId;
   if (saved && accounts.some(a => a.id === saved)) return saved;
-  if (!accounts.length) fail('no Cloudflare account found');
+  if (!accounts.length) fail(msg(lang, 'no_account'));
   if (accounts.length === 1) return accounts[0].id;
   // Run by an agent (no terminal) or with --yes: never pick an account silently.
   if (args.yes || !process.stdin.isTTY)
@@ -174,13 +212,17 @@ async function checkCanvas(host) {
   try {
     const r = await fetch(`https://${host}/api/v1/users/self`, {
       redirect: 'manual',
+      signal: AbortSignal.timeout(20 * 1000),
       headers: { 'User-Agent': 'Neuro-CanvasLMS-installer', Accept: 'application/json' },
     });
     const ct = (r.headers.get('content-type') ?? '').split(';')[0];
     if (r.status === 401 && ct.includes('json')) return { ok: true };
     return { ok: false, detail: `HTTP ${r.status}${ct ? ', ' + ct : ''}` };
   } catch (e) {
-    return { ok: false, detail: e.cause?.code ?? e.message };
+    return {
+      ok: false,
+      detail: e.name === 'TimeoutError' ? 'timeout' : (e.cause?.code ?? e.message),
+    };
   }
 }
 async function askCanvasHost(previous, { quiet = false } = {}) {
@@ -205,19 +247,15 @@ async function askCanvasHost(previous, { quiet = false } = {}) {
   fail(msg(lang, 'cancelled'));
 }
 
-// null = the list could not be read (never treat that as "no storage").
+// { list } or, when the list could not be read, { detail } (never treat that as "no storage").
 function listNamespaces() {
   const r = wrangler(['kv', 'namespace', 'list']);
-  if (!r.ok) return null;
-  try {
-    return JSON.parse(r.out.slice(r.out.indexOf('[')));
-  } catch {
-    return null;
-  }
+  const list = r.ok ? stdoutJson(r, '[') : null;
+  return Array.isArray(list) ? { list } : { detail: lastLines(r.out) || 'no answer' };
 }
 function ensureKv(name, state) {
-  const namespaces = listNamespaces();
-  if (!namespaces) fail('could not list storage');
+  const { list: namespaces, detail } = listNamespaces();
+  if (!namespaces) failStep(msg(lang, 'step_kv_list'), detail);
   const existing =
     namespaces.find(n => n.id === state.kvId) ?? namespaces.find(n => n.title === `${name}-oauth`);
   if (existing) {
@@ -227,7 +265,7 @@ function ensureKv(name, state) {
   say('kv');
   const r = wrangler(['kv', 'namespace', 'create', `${name}-oauth`]);
   const id = r.out.match(/"id":\s*"([a-f0-9]{32})"/)?.[1];
-  if (!id) failStep('could not create storage', r.out);
+  if (!id) failStep(msg(lang, 'step_kv_create'), r.out);
   return id;
 }
 
@@ -250,11 +288,11 @@ async function install() {
   const [major] = process.versions.node.split('.').map(Number);
   if (major < 22) fail(msg(lang, 'node_old', { need: 22, have: process.versions.node }));
   const name = args.name ?? DEFAULT_NAME;
-  if (!validWorkerName(name)) fail('invalid --name');
+  if (!validWorkerName(name)) fail(msg(lang, 'invalid_name'));
   const dir = path.join(HOME, name);
   fs.mkdirSync(dir, { recursive: true });
   const statePath = path.join(dir, 'state.json');
-  const state = fs.existsSync(statePath) ? JSON.parse(fs.readFileSync(statePath, 'utf8')) : {};
+  const state = readState(statePath);
   const plan = updateChoices(state, args);
   if (plan.updating) {
     const from = await runningVersion(state.url);
@@ -270,10 +308,7 @@ async function install() {
   const school = plan.school;
   const kvId = ensureKv(name, state);
   const save = extra =>
-    fs.writeFileSync(
-      statePath,
-      JSON.stringify({ ...state, name, accountId, kvId, host, school, ...extra }, null, 2),
-    );
+    writeState(statePath, { ...state, name, accountId, kvId, host, school, ...extra });
   save({});
 
   say('deploy', { version: VERSION });
@@ -281,7 +316,9 @@ async function install() {
   const main = path.relative(dir, path.join(ROOT, 'worker.mjs'));
   const config = connectorConfig({ name, accountId, kvId, main, template, host, school });
   fs.writeFileSync(path.join(dir, 'wrangler.jsonc'), JSON.stringify(config, null, 2));
-  let r = wrangler(['deploy', '-c', 'wrangler.jsonc'], { cwd: dir });
+  const deploy = () =>
+    wrangler(['deploy', '-c', 'wrangler.jsonc'], { cwd: dir, timeout: 5 * 60 * 1000 });
+  let r = deploy();
   // New Cloudflare account: the user picks a workers.dev subdomain in the dashboard, then we retry.
   for (let i = 0; !r.ok && needsSubdomain(r.out) && i < 3; i++) {
     const link = subdomainLink(accountId);
@@ -289,11 +326,11 @@ async function install() {
     say('subdomain_needed', { link });
     openUrl(link);
     await ask(msg(lang, 'subdomain_wait'));
-    r = wrangler(['deploy', '-c', 'wrangler.jsonc'], { cwd: dir });
+    r = deploy();
   }
-  if (!r.ok) failStep('deploy failed', r.out);
+  if (!r.ok) failStep(msg(lang, 'step_deploy'), r.out);
   const url = parseWorkerUrl(r.out) ?? state.url;
-  if (!url) fail('could not read the connector URL: ' + lastLines(r.out));
+  if (!url) fail(`${msg(lang, 'step_url')}: ${lastLines(r.out)}`);
   ok('deploy_ok', { url });
   save({ url, version: VERSION });
 
@@ -357,9 +394,9 @@ function nextSteps(url, host, { tokenAsked = false } = {}) {
 async function check() {
   console.log(`\n  ${msg(lang, 'title')}\n`);
   const name = args.name ?? DEFAULT_NAME;
-  if (!validWorkerName(name)) fail('invalid --name');
+  if (!validWorkerName(name)) fail(msg(lang, 'invalid_name'));
   const statePath = path.join(HOME, name, 'state.json');
-  const state = fs.existsSync(statePath) ? JSON.parse(fs.readFileSync(statePath, 'utf8')) : {};
+  const state = readState(statePath);
   if (!state.url) {
     console.error('  ✗ ' + msg(lang, 'check_none', { name }));
     process.exitCode = 1;
@@ -379,7 +416,7 @@ async function uninstall() {
   const name = args.name ?? DEFAULT_NAME;
   const dir = path.join(HOME, name);
   const statePath = path.join(dir, 'state.json');
-  const state = fs.existsSync(statePath) ? JSON.parse(fs.readFileSync(statePath, 'utf8')) : {};
+  const state = readState(statePath);
   // The account the connector was installed in. In any other account "Worker does not exist"
   // would look like success while the Worker and its storage (with the token grants) stay online.
   const accountId = await ensureLogin(state.accountId);
@@ -393,8 +430,15 @@ async function uninstall() {
   if (!worker.ok && !/\b10090\b|does not exist/i.test(worker.out))
     fail(msg(lang, 'un_failed', { what: `Worker "${name}"`, detail: lastLines(worker.out) }));
   const before = listNamespaces();
-  if (!before) fail(msg(lang, 'un_failed', { what: 'storage', detail: 'could not list storage' }));
-  const kv = before.find(n => n.id === state.kvId) ?? before.find(n => n.title === `${name}-oauth`);
+  if (!before.list)
+    fail(
+      msg(lang, 'un_failed', {
+        what: msg(lang, 'step_kv_list'),
+        detail: before.detail,
+      }),
+    );
+  const kv =
+    before.list.find(n => n.id === state.kvId) ?? before.find(n => n.title === `${name}-oauth`);
   if (kv) {
     const r = wrangler([
       'kv',
@@ -404,11 +448,12 @@ async function uninstall() {
       kv.id,
       '--skip-confirmation',
     ]);
+    const what = msg(lang, 'storage_label', { title: kv.title });
     if (!r.ok && !/\b10013\b|not found/i.test(r.out))
-      fail(msg(lang, 'un_failed', { what: `storage "${kv.title}"`, detail: lastLines(r.out) }));
+      fail(msg(lang, 'un_failed', { what, detail: lastLines(r.out) }));
     const after = listNamespaces();
-    if (!after || after.some(n => n.id === kv.id))
-      fail(msg(lang, 'un_failed', { what: `storage "${kv.title}"`, detail: 'still listed' }));
+    if (!after.list || after.list.some(n => n.id === kv.id))
+      fail(msg(lang, 'un_failed', { what, detail: after.detail ?? msg(lang, 'still_listed') }));
   }
   fs.rmSync(dir, { recursive: true, force: true });
   ok('un_done');

package/installer/messages.mjs

@@ -80,6 +80,19 @@ const M = {
     update_cancelled: 'Nothing changed. Run the same command again whenever you want to update.',
     failed:
       'Something went wrong: {detail}\n  Nothing is lost: run the same command again to continue.',
+    state_broken:
+      'The local install record could not be read (damaged). It was moved aside to {moved}; carrying on without it.',
+    no_account:
+      'This Cloudflare login has no account yet. Finish signing up at https://dash.cloudflare.com, then run this again.',
+    invalid_name:
+      '--name can only use lowercase letters, digits and dashes (at most 63 characters).',
+    step_kv_list: 'Could not read the list of your Cloudflare storage (KV)',
+    step_kv_create: 'Could not create the Cloudflare storage (KV)',
+    step_deploy: 'Uploading the connector to Cloudflare failed',
+    step_url: 'The connector was uploaded, but Cloudflare did not say its address',
+    storage_label: 'the storage "{title}"',
+    still_listed: 'Cloudflare still lists it after deleting',
+    timed_out: 'Cloudflare did not answer within {s} seconds (check your internet connection)',
   },
   zh: {
     title: 'Neuro-CanvasLMS 安装向导：把你的 Canvas 接进 Claude 或 ChatGPT',
@@ -87,7 +100,7 @@ const M = {
       '需要 Node.js {need} 或更新的版本（你现在是 {have}）。请到 https://nodejs.org 安装后再运行一次。',
     login_needed:
       '第 1/4 步 · 登录 Cloudflare（没有账号可以免费注册：https://dash.cloudflare.com/sign-up）。\n  浏览器会打开一个 Cloudflare 页面（可能在后台标签页里），请在 2 分钟内点蓝色的 "Authorize" 按钮。',
-    login_retry: '没有完成登录。请关掉旧的 Cloudflare 标签页，现在重新打开一个。',
+    login_retry: '没有完成登录。请关掉旧的 Cloudflare 标签页，马上会自动打开一个新页面。',
     login_failed: '没能登录 Cloudflare。准备好之后再运行一次这条命令。',
     logged_in: '已登录 Cloudflare：{email}',
     pick_account: '把连接器装在哪个 Cloudflare 账号里？',
@@ -149,7 +162,18 @@ const M = {
     update_q_unknown:
       '找到你已有的安装「{name}」。要更新到 {to} 吗？设置会沿用，AI 应用不用重新连接。(y/n)',
     update_cancelled: '什么都没改。想更新时再运行一次同一条命令就行。',
-    failed: '出错了：{detail}\n  没有任何东西丢失：再运行一次同一条命令就能接着装。',
+    failed: '出错了：{detail}\n  没有任何东西丢失：再运行一次同一条命令就能继续。',
+    state_broken: '本地安装记录读不出来（文件已损坏），已挪到 {moved}，接下来不再用它。',
+    no_account:
+      '这个 Cloudflare 登录下还没有账号。先在 https://dash.cloudflare.com 完成注册，再运行一次这条命令。',
+    invalid_name: '--name 只能用小写字母、数字和短横线（最多 63 个字符）。',
+    step_kv_list: '没能读取你的 Cloudflare 存储（KV）列表',
+    step_kv_create: '没能创建 Cloudflare 存储（KV）',
+    step_deploy: '把连接器上传到 Cloudflare 失败',
+    step_url: '连接器已经上传，但 Cloudflare 没有告诉它的地址',
+    storage_label: '存储「{title}」',
+    still_listed: '删除后 Cloudflare 仍然列出了它',
+    timed_out: 'Cloudflare 在 {s} 秒内没有回应（请检查网络连接）',
   },
   es: {
     title: 'Instalador de Neuro-CanvasLMS — conecta tu Canvas a Claude o ChatGPT',
@@ -233,6 +257,18 @@ const M = {
     update_cancelled: 'No se cambió nada. Ejecuta el mismo comando cuando quieras actualizar.',
     failed:
       'Algo salió mal: {detail}\n  No se perdió nada: vuelve a ejecutar el mismo comando para continuar.',
+    state_broken:
+      'No se pudo leer el registro local de la instalación (está dañado). Se movió a {moved}; se continúa sin él.',
+    no_account:
+      'Este inicio de sesión de Cloudflare aún no tiene cuenta. Termina el registro en https://dash.cloudflare.com y vuelve a ejecutar esto.',
+    invalid_name: '--name solo puede usar minúsculas, dígitos y guiones (máximo 63 caracteres).',
+    step_kv_list: 'No se pudo leer la lista de tu almacenamiento de Cloudflare (KV)',
+    step_kv_create: 'No se pudo crear el almacenamiento de Cloudflare (KV)',
+    step_deploy: 'Falló la subida del conector a Cloudflare',
+    step_url: 'El conector se subió, pero Cloudflare no indicó su dirección',
+    storage_label: 'el almacenamiento "{title}"',
+    still_listed: 'Cloudflare aún lo muestra después de borrarlo',
+    timed_out: 'Cloudflare no respondió en {s} segundos (revisa tu conexión a internet)',
   },
   ja: {
     title: 'Neuro-CanvasLMS インストーラー — Canvas を Claude や ChatGPT につなぐ',
@@ -316,6 +352,19 @@ const M = {
       '何も変更していません。更新したいときに同じコマンドをもう一度実行してください。',
     failed:
       'エラーが発生しました：{detail}\n  何も失われていません。同じコマンドをもう一度実行すると続きから進みます。',
+    state_broken:
+      'ローカルのインストール記録を読み取れませんでした（破損しています）。{moved} に移動し、使わずに続行します。',
+    no_account:
+      'この Cloudflare ログインにはまだアカウントがありません。https://dash.cloudflare.com で登録を完了してから、もう一度実行してください。',
+    invalid_name: '--name に使えるのは英小文字・数字・ハイフンだけです（63 文字まで）。',
+    step_kv_list: 'Cloudflare のストレージ（KV）の一覧を読み取れませんでした',
+    step_kv_create: 'Cloudflare のストレージ（KV）を作成できませんでした',
+    step_deploy: 'コネクタを Cloudflare にアップロードできませんでした',
+    step_url: 'コネクタはアップロードされましたが、Cloudflare がアドレスを返しませんでした',
+    storage_label: 'ストレージ「{title}」',
+    still_listed: '削除後も Cloudflare の一覧に残っています',
+    timed_out:
+      'Cloudflare が {s} 秒以内に応答しませんでした（インターネット接続を確認してください）',
   },
   hi: {
     title: 'Neuro-CanvasLMS इंस्टॉलर — अपने Canvas को Claude या ChatGPT से जोड़ें',
@@ -396,6 +445,19 @@ const M = {
     update_cancelled: 'कुछ नहीं बदला। जब अपडेट करना हो, वही कमांड फिर से चलाएँ।',
     failed:
       'कुछ गलत हो गया: {detail}\n  कुछ भी नहीं खोया: जारी रखने के लिए वही कमांड फिर से चलाएँ।',
+    state_broken:
+      'लोकल इंस्टॉल रिकॉर्ड पढ़ा नहीं जा सका (खराब है)। उसे {moved} पर हटा दिया गया; उसके बिना आगे बढ़ रहे हैं।',
+    no_account:
+      'इस Cloudflare लॉगिन में अभी कोई अकाउंट नहीं है। https://dash.cloudflare.com पर साइन-अप पूरा करें, फिर इसे दोबारा चलाएँ।',
+    invalid_name:
+      '--name में सिर्फ़ छोटे अक्षर, अंक और डैश हो सकते हैं (ज़्यादा से ज़्यादा 63 अक्षर)।',
+    step_kv_list: 'आपके Cloudflare स्टोरेज (KV) की सूची पढ़ी नहीं जा सकी',
+    step_kv_create: 'Cloudflare स्टोरेज (KV) बनाया नहीं जा सका',
+    step_deploy: 'कनेक्टर को Cloudflare पर अपलोड करना विफल रहा',
+    step_url: 'कनेक्टर अपलोड हो गया, लेकिन Cloudflare ने उसका पता नहीं बताया',
+    storage_label: 'स्टोरेज "{title}"',
+    still_listed: 'हटाने के बाद भी Cloudflare उसे दिखा रहा है',
+    timed_out: 'Cloudflare ने {s} सेकंड में जवाब नहीं दिया (अपना इंटरनेट कनेक्शन जाँचें)',
   },
 };
 export const msg = (lang, key, vars = {}) =>