@ai-ecoverse/slicc-spectrum 1.108.0 → 1.108.1

package/README.md

@@ -438,7 +438,7 @@ Disconnect and Remove delete its key record first, as for any vault-backed key,
 Every other account calls `connect` without `options`, as before.
 Accounts with `group: 'mcp'` (MCP servers) get their own **MCP servers** heading (`.accounts[data-group=mcp]`).
 With `settings.addServer` the heading shows even with no servers, and **Add server** (`data-action="add-server"`) opens a form (`form[data-form=add-server]`) with Name and URL (`input[data-server-field=name|url]`), **Uses a token** (`sp-switch[data-server-field=token]`, with its help line `[data-token-help]` only while it's on), **Add** (`data-action="save"`) and Cancel (`data-action="cancel"`). The page checks only the obvious, on the field (`[data-problem=name|url]`, focused): an empty field, a name outside letters, digits, `_` and `-`, a URL that isn't `https:`. Then it calls `addServer(name, { url })`, or `{ url, token: true }`: Add is pending and Cancel disabled until the answer, a refusal shows in the form and keeps what was typed (`code: 'url-secret'` on the URL field, invalid and focused, as “This URL contains a secret. Remove it, turn on Uses a token, and paste the token when you connect.”; any other `code`, or none, as `reason` with a capital first letter in `[data-problem=form]`, and a rejection there in `failureText`'s words), and `{ ok: true }` closes and resets it. The row comes with the `accounts` event, never from the answer.
-With `settings.removeServer` every MCP row adds **Remove** (`data-action="remove-server"`, a quiet delete icon named “Remove {server}”), which asks “Remove {server}?” (“Its token is deleted from the vault. Agents can’t use it any more.”, “Its sign-in is deleted…” for OAuth, and only “Agents can’t use it any more.” when the vault holds no record for it, whatever the row's `auth`) with a destructive **Remove** and Cancel focused. It removes the row's vault records (`MCP_<SERVER>_TOKEN` on a token row, plus any live `mcp` record of that server, which a disabled or refused row can still hold), takes back the page's registration or, with none, the URL of a token it held and that isn't a pin, drops the `slicc-spectrum.mcp-endpoints` entry, then calls `removeServer(id)`. The row reads **Removing…** with its buttons disabled until an `accounts` event no longer lists it; `{ ok: false, reason }` (with a capital first letter), a rejection or a vault failure shows in the row (`.failure`) and keeps it. There is no edit: remove and add again.
+With `settings.removeServer` every MCP row adds **Remove** (`data-action="remove-server"`, a quiet delete icon named “Remove {server}”), which asks “Remove {server}?” (“Its token is deleted from the vault. Agents can’t use it any more.”, “Its sign-in is deleted…” for OAuth, and only “Agents can’t use it any more.” when the vault holds no record for it, whatever the row's `auth`) with a destructive **Remove** and Cancel focused. It calls `removeServer(id)` first, since the agent decides: `{ ok: false, reason }` (with a capital first letter) or a rejection shows in the row (`.failure`), keeps it, and leaves the vault, the registration and the `slicc-spectrum.mcp-endpoints` entry as they were. Only after `{ ok: true }` does it remove the row's vault records (`MCP_<SERVER>_TOKEN` on a token row, plus any live `mcp` record of that server, which a disabled or refused row can still hold), take back the page's registration or, with none, the URL of a token it held and that isn't a pin, and drop the `slicc-spectrum.mcp-endpoints` entry; if the vault refuses to take the URL back, the entry keeps that URL, so removing the server again after adding it takes it back. It tries every step, using what the row held when Remove was confirmed, and a failure shows below the rows (`[data-failure=servers]`), because the row is about to go. The line names what stayed, with “sign-in” for “token” on an OAuth row: “{server} is removed, but its token stayed in the vault.” and “Open Secrets to remove it.”, or “Unlock the vault, then remove it under Secrets.” when the vault was locked; a URL reads “the vault kept its URL”, both read “its token and URL stayed in the vault”, and either of those ends “Add the server and remove it again.”, after “Unlock the vault, then” when locked, since Secrets can't remove a URL. The row reads **Removing…** with its buttons disabled until an `accounts` event no longer lists it. There is no edit: remove and add again.
 `Account.state` shows on MCP rows in words, after **Token rejected** and **Sign-in expired**: `connecting` **Connecting…**, `needs-secret` **Needs a token**, `needs-auth` **Needs sign-in**, `failed` **Couldn’t connect**, `disabled` **Disabled**, `refused` **Refused**, `connected` as `status`, and rows with no `state` as before. A row with `auth: 'local'`, `state: 'disabled'` or `state: 'refused'` has no sign-in, so it offers neither Connect nor Disconnect nor the moved note, whatever its `status`; a token or OAuth row that failed keeps Connect, which is how a new token gets in. A refused row shows its reason from `settings.refusals()` with a capital first letter (`[data-refusal]`), read again on every `accounts` event while a row is refused, or “This entry was refused. Remove it and add it again here.” when the method is missing, fails or has no entry for it, in the host's place, after the host when it has one.
 An `api-key` account asks for its `secret`: “{provider} API key” by default, “{provider} token” for `secret: 'token'`; when it is `expired` it reads **API key rejected** or **Token rejected**.
 An MCP server with `auth: 'oauth'` signs in in a pop-up: its button reads **Sign in**, and it reads **Needs sign-in** when `disconnected` and **Sign-in expired** when `expired`.
@@ -791,7 +791,7 @@ Theme, model, thinking level, composer and diff preferences, the models on offer
 A model can say it is its provider's `default`.
 Emit `settings` or `accounts` when the models on offer change.
 The optional `providers()` returns the `ProviderOption`s that can be added (`{ id, name, description?, auth: 'api-key' | 'oauth' | 'fields' | 'local', fields?, keyUrl?, needs?, blocked?, vaultName? }`, sorted by name, added ones included), with a `providers` event when they change; `id` is pi-ai's provider id and becomes the `Account.id`. With it, `accounts()` lists only added accounts, `connect(id, secret?, fields?)` adds one (`group: 'providers'`; a `fields` provider becomes an `api-key` account with `store: 'vault'` and only its non-secret `fields`), and the optional `remove(id)` drops one. `Account` adds `keyUrl`, `description`, `vaultName`, the vault record for its key (else pi-ai's environment-variable name), and `url`, an `mcp:<server>` account's server URL. `needs: 'cors-free-transport'` on either is static (the provider doesn't answer a browser); `blocked: 'cors-free-transport'` is live, set while the current transport can't reach it, and cleared by a `providers` and an `accounts` event when an extension or a linked slicc appears.
-The optional `addServer(name, entry)` and `removeServer(id)` exist only on the owner's connection and answer `McpEdit` (`{ ok: true }` or `{ ok: false, code?, reason }`, an answer and not a rejection, with nothing written; `code` is an `McpRefusalCode`); `name` is the `mcp.json` key, `entry` is `{ url, token? }` plus any `mcp.json` field, `id` is the row's `mcp:<server>`, and the row changes with the `accounts` event once the file watch reconciles. `removeServer` forgets the server's local OAuth state only; the vault records and the page's registration are Settings' to remove first. The optional owner-only `refusals()` answers `{ [server]: { code, reason } }` for the refused entries, which aren't on the replicated rows. `Account.state` (`McpState`: `connecting`, `connected`, `needs-secret`, `needs-auth`, `failed`, `disabled` or `refused`) says how an MCP server is doing, and `auth: 'local'` on one means it has no sign-in; `identity` is its host (`''` for a refused entry with no URL), and `url` has no user, password, query or fragment.
+The optional `addServer(name, entry)` and `removeServer(id)` exist only on the owner's connection and answer `McpEdit` (`{ ok: true }` or `{ ok: false, code?, reason }`, an answer and not a rejection, with nothing written; `code` is an `McpRefusalCode`); `name` is the `mcp.json` key, `entry` is `{ url, token? }` plus any `mcp.json` field, `id` is the row's `mcp:<server>`, and the row changes with the `accounts` event once the file watch reconciles. `removeServer` forgets the server's local OAuth state only; the vault records and the page's registration are Settings' to remove once it answers `{ ok: true }`. The optional owner-only `refusals()` answers `{ [server]: { code, reason } }` for the refused entries, which aren't on the replicated rows. `Account.state` (`McpState`: `connecting`, `connected`, `needs-secret`, `needs-auth`, `failed`, `disabled` or `refused`) says how an MCP server is doing, and `auth: 'local'` on one means it has no sign-in; `identity` is its host (`''` for a refused entry with no URL), and `url` has no user, password, query or fragment.
 `Account.signIn` (`{ url, code? }`) is what a `signing-in` account's sign-in page and device code are, and `connect` takes an optional fourth `options` (`{ method: 'sign-in' | 'key' }`) for an account that signs in or takes a key (`auth: 'oauth'` with `secret: 'api-key'`).
 
 #### `changes` (optional)

package/dist/slicc-ui.js

@@ -53845,6 +53845,16 @@ var removeBodies = {
   local: "Models from it stop working."
 };
 var serverGone = "Agents can\u2019t use it any more.";
+var serversFailure = "mcp";
+function serverLeft(account, left) {
+  const url = left.some(([part2]) => part2 === "url");
+  const record = left.some(([part2]) => part2 === "record");
+  const held2 = account.auth === "oauth" ? "sign-in" : "token";
+  const locked = left.some(([, error]) => isVaultFailure(error) && error.code === "EACCES");
+  const what = !url ? `its ${held2} stayed in the vault` : record ? `its ${held2} and URL stayed in the vault` : "the vault kept its URL";
+  const next = url ? locked ? "Unlock the vault, then add the server and remove it again." : "Add the server and remove it again." : locked ? "Unlock the vault, then remove it under Secrets." : "Open Secrets to remove it.";
+  return `${account.provider} is removed, but ${what}. ${next}`;
+}
 var refusedEntry = "This entry was refused. Remove it and add it again here.";
 var urlSecret = "This URL contains a secret. Remove it, turn on Uses a token, and paste the token when you connect.";
 var sentence2 = (text4) => text4.charAt(0).toUpperCase() + text4.slice(1);
@@ -54339,6 +54349,7 @@ var SliccSettings = class extends ThemedElement {
     queueMicrotask(() => settleModels(model));
     this.removing = /* @__PURE__ */ new Set();
     this.refusals = {};
+    if (this.failure?.id === serversFailure) this.failure = null;
     void this.#readRefusals(model);
     if (model.updates !== this.#developerPort) {
       this.#developerPort = model.updates;
@@ -55163,16 +55174,26 @@ var SliccSettings = class extends ThemedElement {
     const held2 = account.auth === "oauth" ? "sign-in" : "token";
     return `Its ${held2} is deleted from the vault. ${serverGone}`;
   }
-  async #clearServer(model, account) {
+  #serverClear(model, account) {
     const vault = model.vault;
     const server = serverOf(account);
     const records = vault?.remove ? this.#serverRecords(account, vault) : [];
     const held2 = !!vault?.remove && this.#heldRecords(account, vault).length > 0;
     const pinned = !!this.#pinned(account);
     const url = registrations2()[server] ?? (held2 && !pinned && this.#mcpUrl(account));
-    for (const [name, kind] of records) await gone2(vault, name, kind);
-    if (url) await vault?.endpoints?.({ remove: { mcp: [{ server, url }] } });
-    register(server, void 0);
+    return async () => {
+      const left = [];
+      for (const [name, kind] of records)
+        await gone2(vault, name, kind).catch((error) => left.push(["record", error]));
+      try {
+        if (url) await vault?.endpoints?.({ remove: { mcp: [{ server, url }] } });
+        register(server, void 0);
+      } catch (error) {
+        register(server, url);
+        left.push(["url", error]);
+      }
+      return left;
+    };
   }
   #markRemoving(id, on2) {
     const rest = [...this.removing].filter((candidate) => candidate !== id);
@@ -55210,10 +55231,13 @@ var SliccSettings = class extends ThemedElement {
       if (this.model === model) this.failure = { id, message };
     };
     try {
-      await this.#clearServer(model, account);
+      const clear2 = this.#serverClear(model, account);
       const edit = await model.settings.removeServer?.(id);
-      if (!edit.ok) refused3(sentence2(edit.reason));
-      else if (this.model === model) this.focusOn("[data-action=add-server]");
+      if (!edit.ok) return refused3(sentence2(edit.reason));
+      const left = await clear2();
+      if (this.model !== model) return;
+      if (left.length) this.failure = { id: serversFailure, message: serverLeft(account, left) };
+      this.focusOn("[data-action=add-server]");
     } catch (error) {
       refused3(failureText(error));
     }
@@ -55317,13 +55341,14 @@ var SliccSettings = class extends ThemedElement {
   }
   #serverList(servers) {
     const add = !!this.model?.settings.addServer;
-    if (!(servers.length || add)) return A;
+    const failed2 = this.failure?.id === serversFailure;
+    if (!(servers.length || add || failed2)) return A;
     return b`<h2>MCP servers</h2>
       <div class="accounts" data-group="mcp">${c(
       servers,
       (account) => account.id,
       (account) => this.#account(account)
-    )}</div>
+    )}${failed2 ? b`<div class="failure" role="alert" data-failure="servers"><swc-icon-alert-triangle size="s" aria-hidden="true"></swc-icon-alert-triangle><span>${this.failure?.message}</span></div>` : A}</div>
       ${add && this.serverOpen ? this.#serverForm() : add ? b`<div class="add"><swc-action-button size="m" quiet data-action="add-server" @click=${() => this.#openServerForm()}><swc-icon-add slot="icon"></swc-icon-add>Add server</swc-action-button></div>` : A}`;
   }
   #notice(row, size4 = "long") {