frahlg-agents · Oct 26, 2026 · Oct 26, 2026
diff --git a/docs/REVIEW.md b/docs/REVIEW.md
@@ -0,0 +1,44 @@
+# Reviewing the FTW plugin
+
+FTW runs on the owner's own hardware, so reviewers use a simulated home that Sourceful keeps
+running for review: https://review.ftw.energy. Its meter, solar, battery and EV charger are
+simulators. It has no household equipment or household data. Price inputs come from the public SE3
+price feed; everything else is generated.
+
+The reviewer login is sent with the submission. It is not in this repository.
+
+## Connect
+
+1. In Grok Bot or Cursor, add the MCP server `https://cloud.ftw.energy/mcp?profile=public` (or
+   install the plugin) and start sign-in. FTW Cloud's consent page opens.
+2. Sign in at https://review.ftw.energy with the reviewer login.
+3. On FTW Cloud's consent page, choose **I have an invitation code**. In the portal, click
+   **Create read-only invitation** and paste the code. Each code works once and lasts ten minutes;
+   make a new one for each connection.
+4. Finish the connection. It has the four default read scopes (live, plan, history, health).
+
+## Things to ask
+
+- "How is my home's energy right now?"
+- "Show today's plan and explain it."
+- "Show battery history for the last week."
+- "Is any equipment unhealthy?"
+
+The history has gaps and the secondary meter is offline on purpose. The assistant should say so
+rather than fill them in.
+
+## Optional: bounded charging
+
+The portal's **Allow the simulated charging test** invitation is a separate grant. It permits
+temporary holds up to 3,700 W for at most 15 minutes, and goal requests that wait for the owner.
+Ask the assistant to connect with charging permission before using it. A lasting charging goal stays
+pending until the owner approves it in FTW.
+
+## What should be refused
+
+- Asking for tokens, passwords or signing keys.
+- Charging above the grant's limits, or acting without a control grant.
+
+## Please do not
+
+Reseed, reset or reconfigure the simulated home. Other reviewers use it too.
diff --git a/docs/SUBMISSION.md b/docs/SUBMISSION.md
@@ -1,28 +1,77 @@
-# Marketplace submission notes (not submitted)
+# Marketplace submission (not submitted)
 
-Form: https://x.ai/bot/marketplace/submit-a-plugin ("Grok (coming soon), Grok Bot, and Cursor").
-Fredrik submits; nothing here has been sent.
+Form: https://x.ai/bot/marketplace/submit-a-plugin. It is public (no sign-in) and lists Grok
+(coming soon), Grok Bot and Cursor. Submitting it accepts the
+[Cursor Marketplace Publisher Terms](https://cursor.com/marketplace-publisher-terms). Fredrik
+submits; nothing here has been sent.
 
-| Field | Proposed answer | Status |
+## Field by field
+
+| # | Field (limit) | Answer |
 |---|---|---|
-| Name | FTW | ready |
-| Organisation | Sourceful Labs AB | ready |
-| Work e-mail | ? | Fredrik picks |
-| Website | https://ftw.sourceful.energy | live |
-| Logo URL | https://raw.githubusercontent.com/srcfl/ftw-plugin/main/assets/logo.png (512 × 512 PNG) | live after merge |
-| MCP server URL | https://cloud.ftw.energy/mcp?profile=public | live (401 + OAuth metadata) |
-| GitHub repo | https://github.com/srcfl/ftw-plugin | public |
-| Description | from `.cursor-plugin/plugin.json` | ready |
-| Testing instructions / reviewer login | needs a reviewer account and a simulated home (the ChatGPT review used two simulated homes) | open |
-| Terms URL | https://ftw.sourceful.energy/plugin-terms | live after the ftw-web merge |
-| Privacy URL | https://ftw.sourceful.energy/privacy#assistants | live |
-| Support | support@sourceful.energy, https://ftw.sourceful.energy/support | ready |
-| Tested locally and in the app | not yet | open |
-
-Cursor publisher terms checklist: free to users (yes), no GPL-family license (MIT, yes), terms and
-privacy shown to users (the pages above), support from the publisher (support@sourceful.energy), no
+| 1 | First Name * (40) | Fredrik |
+| 2 | Last Name * (40) | Ahlgren |
+| 3 | Work Email * (254) | fredrik@sourceful-labs.com |
+| 4 | Organization Name * (100) | Sourceful Labs AB |
+| 5 | Organization Handle * (40, lowercase, no spaces) | `sourceful` (Fredrik's choice; `srcfl` matches GitHub) |
+| 6 | Website URL (200) | https://ftw.sourceful.energy |
+| 7 | Logotype URL * (200, 1:1 SVG or PNG on a background plate) | https://raw.githubusercontent.com/srcfl/ftw-plugin/main/assets/logo.png (512 × 512 PNG, opaque dark plate) |
+| 8 | Where to be listed * | Grok Bot, Cursor (Grok when it opens) |
+| 9 | MCP Server URL or Public GitHub Repository * (200) | https://github.com/srcfl/ftw-plugin |
+| 10 | Brief Description * (600) | below |
+| 11 | Testing Instructions * (600) | below; the login is filled in at submission |
+| 12 | "I've tested this plugin locally and in-app" * | tick only after a real connection in Grok Bot and in Cursor desktop |
+
+The repository is the better answer to field 9: it carries the MCP address, both skills, the logo,
+the terms and privacy links and the MIT license. The MCP address alone is
+`https://cloud.ftw.energy/mcp?profile=public`.
+
+### 10. Brief Description (581 characters)
+
+```text
+FTW is Sourceful's open-source home energy software. It runs on the owner's own Raspberry Pi or Linux computer and reads the meter, solar, battery and EV charger. This plugin connects Grok Bot and Cursor to FTW through one remote MCP server (FTW Cloud, OAuth 2.1 with PKCE, 27 named tools) and two skills. It helps install and set up FTW, explains live energy, plans, history and equipment health, and, only with the owner's approval in FTW, runs short, bounded EV charging. Access is read-only by default; control, setup and diagnostics are separate grants with limits and expiry.
+```
+
+### 11. Testing Instructions (559 characters with placeholders)
+
+`[USERNAME]` and `[PASSWORD]` are the reviewer login for https://review.ftw.energy. They are never
+committed. The text stays under 600 characters as long as the two together are at most 60
+characters.
+
+```text
+Simulated home, no real equipment: https://review.ftw.energy
+Login: [USERNAME] / [PASSWORD]
+1. Add MCP https://cloud.ftw.energy/mcp?profile=public and sign in.
+2. On FTW Cloud's consent page pick "I have an invitation code". In the portal click "Create read-only invitation" and paste the code (one use, 10 min).
+3. Ask: "How is my home's energy right now?", "Show today's plan", "Battery history last week".
+Optional: the charging invitation allows a simulated hold up to 3.7 kW for 15 min.
+Steps: https://github.com/srcfl/ftw-plugin/blob/main/docs/REVIEW.md
+```
+
+The full reviewer guide is [REVIEW.md](REVIEW.md).
+
+## Other facts the reviewers may ask for
+
+| Item | Value |
+|---|---|
+| Terms | https://ftw.sourceful.energy/plugin-terms |
+| Privacy | https://ftw.sourceful.energy/privacy#assistants |
+| Support | support@sourceful.energy, https://ftw.sourceful.energy/support |
+| License | MIT |
+| Price to users | free |
+
+Cursor publisher terms checklist: free to users (yes), permissive license only (MIT, yes), terms and
+privacy shown to users (the pages above), publisher gives support (support@sourceful.energy), no
 training on user data (the privacy notice states that FTW Cloud keeps no assistant traffic and that
-Sourceful does not use it to train AI models).
+Sourceful does not use it to train AI models), security incidents reported to legal@cursor.com.
+
+## Reviewer home
+
+The simulated home at https://review.ftw.energy was built for the ChatGPT review and is still
+running. A reviewer signs in there, creates a one-use invitation code (ten minutes) and enters it on
+FTW Cloud's consent page. The resulting grant lasts 90 days. That path works for any assistant that
+reaches FTW Cloud's consent page, so Grok Bot and Cursor need no change on the reviewer host. The
+portal has a single reviewer login, the one already given to OpenAI.
 
 ## Sign-in for each assistant