Extract memind_adm admin server, add local dev tooling, and remove image-generation.

Split platform admin and ops APIs into standalone admin-server.mjs with network guards; simplify billing to RMB token pricing, refactor user auth, and add rsync deploy plus local-test scripts and docs.

Co-authored-by: Cursor <cursoragent@cursor.com>

capabilities.test.mjs

@@ -8,6 +8,7 @@ import {
   DEFAULT_USER_CAPABILITIES,
   normalizeCapabilityPatch,
   sandboxDeveloperTools,
+  sandboxMcpTools,
 } from './capabilities.mjs';
 import { applyPoliciesToCapabilities } from './policies.mjs';
 
@@ -118,3 +119,38 @@ test('buildPageEditAgentPolicy without shell keeps empty developer tools', () =>
   const narrowed = buildPageEditAgentPolicy(base);
   assert.deepEqual(narrowed.extensionOverrides, []);
 });
+
+test('sandboxMcpTools returns correct tool list based on capabilities', () => {
+  const base = { ...DEFAULT_USER_CAPABILITIES, static_publish: true };
+  assert.deepEqual(sandboxMcpTools(base), ['read_file', 'write_file', 'edit_file', 'create_dir']);
+
+  const withBrowse = { ...base, code_browse: true };
+  assert.ok(sandboxMcpTools(withBrowse).includes('list_dir'));
+
+  const withShell = { ...base, shell: true };
+  assert.ok(sandboxMcpTools(withShell).includes('list_dir'));
+});
+
+test('static_publish with sandboxMcp uses stdio sandbox-fs extension instead of developer', () => {
+  const caps = { ...DEFAULT_USER_CAPABILITIES, static_publish: true };
+  const sandboxMcp = { serverPath: '/opt/h5/mindspace-sandbox-mcp.mjs', sandboxRoot: '/opt/h5/MindSpace/abc123' };
+  const policy = buildAgentExtensionPolicy(caps, { sandboxMcp });
+
+  const sandboxExt = policy.extensionOverrides.find((ext) => ext.name === 'sandbox-fs');
+  assert.ok(sandboxExt, 'sandbox-fs extension should be present');
+  assert.equal(sandboxExt.type, 'stdio');
+  assert.equal(sandboxExt.envs.SANDBOX_ROOT, '/opt/h5/MindSpace/abc123');
+  assert.equal(sandboxExt.args[1], '/opt/h5/MindSpace/abc123'); // also passed as argv[2]
+  assert.ok(sandboxExt.available_tools.includes('write_file'));
+  assert.ok(sandboxExt.available_tools.includes('read_file'));
+
+  // built-in developer extension should only remain for read_image (image_read: true by default)
+  const developer = policy.extensionOverrides.find((ext) => ext.name === 'developer');
+  assert.ok(developer, 'developer should remain for read_image');
+  assert.deepEqual(developer.available_tools, ['read_image']);
+
+  // no full developer write/edit/shell in extensions
+  const allTools = policy.extensionOverrides.flatMap((e) => e.available_tools ?? []);
+  assert.ok(!allTools.includes('write'), 'built-in write should not be exposed');
+  assert.ok(!allTools.includes('shell'), 'shell should not be exposed');
+});