Sundogs

For an owner with a subscription: a one-time Stripe customer-portal link. Give it to the owner and say: "Open this to cancel or change your card." The owner opens it in their browser (you can't use it for them). It expires about 5 minutes after it is made, so ask for it when they are ready, and call this tool again for a new one. For accounts without a subscription (one-time licenses never renew) the answer is a plain message and no link. Needs the checkout:create permission (the link can cancel a subscription and shows billing details, so a download-only key can't get one).

Which of the installed apps have newer versions this site's license covers, and which aren't covered (with the fix). Each app carries changes (release notes per version since the installed one: {version, date, notes, action?}), actionNeeded (every version's action since the installed one: what the owner or you must do; empty means nothing, so report requirement changes only when it isn't empty; core has the same) and whatsNew (the same notes as one flat list); without detail, only the newest version and the newest whatsNew entry. Pass installed as {app id: version} from the site's site-apps/manifest.json in its repo (the public status page no longer shows versions; signed-in admins see them at <admin path>/api/status). Needs the download permission.

Add a free app (like Forms) to the owner's account. Needs the owner signed in (browser sign-in, or an API key with the download permission). Safe to repeat: a second claim returns the same result. Accepts the app's free license (the result says which version). Paid apps can't be claimed. Pass site_domain (e.g. example.com) to record which site will run it; only the domain and app id are stored.

Price a cart and open a checkout for the owner to pay in their browser. Returns checkout_url (on this registry; the owner signs in as this account, reads the license, ticks the box and pays on Stripe's page: never pay or tick for them), the total, what's already owned (not charged twice), companion prices and included apps, and the one-line license to relay. Call get_checkout until status is "paid", then get_download. A site license is for one website (site_domain required); license_kind "unlimited" covers every site the owner owns or runs themselves (not client sites). interval: only "once" is sold (pay once, 12 months of updates); subscriptions are not offered yet. Safe to repeat: the same cart while open returns the same checkout. Optional coupon: a code the owner gave you; the answer then shows the discount and the new total (total_before_code, coupon, total). A free code returns status "confirm" and the checkout_url: the order shows at $0, but the owner must still open it, read the license and tick the box (never tick for them); the license is granted there. Then get_checkout turns "paid": call get_download. A tester pass works only for the account it names, for site licenses for one site, or up to N sites they choose (past that it is refused: tell the owner to ask whoever gave the pass for more). Wrong codes get a plain error (expired, used up, not for these apps, already used); don't guess codes. Needs the checkout:create permission.

The same facts as the account dashboard's Overview: how many apps, licenses and sites, license status (active, past due, canceled), the next date updates end, what the account owns, the latest release (versions and a one-line headline per app; detail: true for every note) and the next steps for a new account. Needs the owner signed in.

One app's requirements (Cloudflare plan, hosts, settings), price, versions, stage ("beta" or "stable") and what's included. Tell the owner the requirements, and that the app is in beta when it is, before they buy. price_text is the price in plain words (the cents are in prices and price_list); cloudflarePlan is the Cloudflare plan the app needs ("free" = the Cloudflare free plan, not the price); plan is deprecated and repeats it.

Status of a checkout from create_checkout: pending (not paid yet; payment_started says whether the owner reached Stripe), paid (the license is on the account: call get_download), confirm (a free code made it $0: the owner must still open checkout_url and tick the license box), expired or failed; held or needs_refund when a payment arrived that could not be applied as quoted (the answer says what happened and that the owner is refunded or the payment is being checked: never pay again). cannot_pay (with a pending status) means the account changed since the checkout was made and the pay button would refuse it: don't send the owner to it. next_call, when present, is the exact next tool call (get_download once paid; create_checkout or renew_updates with the same order after expired, failed or cannot_pay). poll_after_seconds says how long to wait before checking again. pairs_well_with (when present) lists apps that work with these, best match first, with why, the real price (a companion price where it applies) and the license that price buys (license: site, for site_domain; or unlimited, for all the owner's sites): mention them briefly if useful; never add one or start a checkout for it unless the owner asks. Only your own checkouts are visible. Needs the checkout:create permission, like create_checkout.

Prepare the download for one site: a zip with the shared core plus the apps this account owns that cover site_domain (or only the apps you list), their agent skills, INSTALL.md, manifest.json, a signed license.json and download.sig (run node site-apps/verify.mjs after unzipping). Pass `apps` with the apps the owner asked for; without it, every owned app that covers the domain is included (the answer lists what is in the zip). Free apps named in `apps` that the account doesn't own yet are claimed first (same as claim_free_app; tell the owner the free license the answer names). Paid apps are never bought here: one that isn't owned is refused with the create_checkout call to make, and nothing is claimed. Site Health (app id "health") is free and comes with every download, whatever `apps` says: tell the owner in one sentence. If the owner doesn't want it, pass without: ["health"] (without can leave out any app). If an app's update window holds it on an older version, the download carries the newest core that runs it (core_note says so) or is refused with the fix (renew_updates). Returns a short-lived link (10 minutes), its sha256, each app's requirements (detail: true adds the full bundle manifest, which is also in the zip) and download.command (fetch, check, unpack); download.needs says what the link needs (with an API key: the same key, as $SITE_APPS_KEY in the command; after a browser sign-in: nothing, the link carries a one-time secret). Run the install from the site's project folder (the folder it deploys from): unzip the download there as site-apps/, then follow site-apps/INSTALL.md. Tell the owner each app's requirements before installing. Apps not owned or not covered for that domain are refused with the exact fix. Needs the download permission.

A license's type (site, unlimited or reseller), billing (once or subscription), status (active, past_due, canceled, revoked), when updates end, which versions it covers, the sites using the app, and whether a renewal or upgrade is on offer. Give license_id (from list_owned or get_account) or app_id (every license for that app). Needs the owner signed in.

The full Markdown of a playbook: verified steps the agent can follow to build something itself on Cloudflare. "start-here" is the first-time setup check for owners not on Cloudflare yet.

The account's orders (id, date, what, amount, status), subscription payments, licenses whose updates can be renewed, and upgrade offers. Receipts and invoices are emailed by Stripe; to cancel a subscription or change a card, call billing_portal_link and give the owner the link. Needs the owner signed in.

The apps this account owns: app, license (site or all sites), where it came from (free, order, grant) and when updates end. Needs the owner signed in.

The domains this account has downloaded apps for (domain, app and version only; the registry never sees site data): per site the apps with installed (the version last downloaded for that site: the store can't see what is deployed; versions_are says so), available and latest versions, whether an update is available or needs a renewal, the agency's client_label, and when the registry last saw it. Needs the owner signed in.

A site license follows one website. If the site changes domain, move its licenses here (same website only; up to 3 moves a year per license, logged). Leave app_id out to move every site license held for from_domain. All-sites and free licenses already cover every domain. Needs the download permission.

Open a checkout that adds 12 months of updates to paid licenses whose updates end within 90 days (or ended). Leave entitlement_ids out to renew every license that's due; ids come from list_owned. The version already installed keeps working either way. Priced at the renewal price (about half). The owner pays in the browser like any checkout. Needs the checkout:create permission.

Find site apps and free playbooks (how-tos) by what the site needs, e.g. "contact form", "redirects", "404". Leave query empty to list everything. Every app has a category ({slug, name}); categories lists them all in catalog order, and category narrows the apps to one. Each app has stage ("beta": works, but things may still break; tell the owner before they buy; "stable" otherwise) and stage_note, price_text (a plain sentence like "$19 one-time, one site"), the exact amounts in cents (prices, price_list) and cloudflarePlan (the Cloudflare plan it needs: "free" means the Cloudflare free plan, not the price). The older field plan is deprecated: it repeats cloudflarePlan.