kloudy 0.4.3 → 0.4.5

package/src/mcp.mjs

@@ -1,74 +1,74 @@
 import {conversationParams,conversationResult} from './conversation.mjs';
-import {instrumentToolHandler} from './activity.mjs';
-import {configuredModels} from './models.mjs';
-import {actionInput,hostingParams,connectionParams,stableIntentKey} from './product-actions.mjs';
-import {welcomeContent} from './welcome.mjs';
-import {Approvals,approvalTool,approvalResource} from './approval.mjs';
-import {approvalHTML} from './approval-ui.mjs';
-import {getUiCapability,RESOURCE_MIME_TYPE} from '@modelcontextprotocol/ext-apps/server';
-import {convertPage,convertPages} from './public.mjs';
-import {localStrings} from './strings.mjs';
-import {Server} from '@modelcontextprotocol/sdk/server/index.js';
-import {StdioServerTransport} from '@modelcontextprotocol/sdk/server/stdio.js';
-import {ListToolsRequestSchema,CallToolRequestSchema,ListPromptsRequestSchema,GetPromptRequestSchema,ListResourcesRequestSchema,ReadResourceRequestSchema} from '@modelcontextprotocol/sdk/types.js';
-import {fileURLToPath} from 'node:url';
-import {introduce,isAttachIntent,ideGuidance} from './introduce.mjs';
-import {withConnection} from './connection.mjs';
-const gateway={name:'kloudy',description:'Use this whenever the user mentions Kloudy, or asks to find, route, or call any MCP tool or SDK. For Kloudy or /kloudy alone, use introduce to welcome this project; an attached host does not need another install question. Select one tool through the same engine. Autonomous by default; the IDE permission system controls tool calls and the engine enforces authorization.',inputSchema:{type:'object',properties:{operation:{type:'string',enum:['conversation','host_interface','models_list','action','wallet_connection','hosting','wallet','introduce','decline','convert','yield_list','query','ask','assemble','call','status','cancel','strings_list','strings_save','strings_call','strings_use','strings_keep','strings_remove','strings_prune']},conversation_operation:{type:'string',enum:['read','append','sync']},conversation:{type:'object'},action:{type:'string',enum:['chain.head','wallet.prepare','bww.fetch','bww.publish']},inputs:{type:'object'},idempotency_key:{type:'string',maxLength:128},chain:{type:'string',maxLength:100},budget_usd_micros:{type:'integer',minimum:1,maximum:1000000000000},wallet_operation:{type:'string',enum:['balance','top_up']},amount_usd:{type:'string'},goal:{type:'string'},scope:{type:'object'},limit:{type:'integer',minimum:1,maximum:5},url:{type:'string'},urls:{type:'array',minItems:1,maxItems:8,items:{type:'string'}},resolution:{type:'string',enum:['compact','standard']},string_name:{type:'string'},choices:{type:'array',maxItems:16,items:{type:'object',properties:{source:{type:'string'},kind:{type:'string',enum:['mcp','sdk','cli']},goal:{type:'string'}},required:['source','kind','goal'],additionalProperties:false}},selection_ids:{type:'array',items:{type:'string'},minItems:1,maxItems:16,uniqueItems:true},selection_id:{type:'string'},name:{type:'string'},arguments:{type:'object'},candidates:{type:'array',maxItems:16,items:{type:'object'}},lane:{type:'string',enum:['non_medical','medical']}},additionalProperties:false}};
-export function createMcpServer({useClient,greet=introduce,strings=localStrings,models=configuredModels,onActivity}){
-  const server=new Server({name:'kloudy',version:'0.3.15'},{capabilities:{tools:{listChanged:true},prompts:{},resources:{}},instructions:'When the user says Kloudy or /kloudy, use operation introduce. Return the current project greeting. Do not repeatedly ask to install an already attached tool. Respect a no answer and the host permission ceiling. '+Object.values(ideGuidance).join(' ')});
-  const approvals=new Approvals(),hasUI=()=>getUiCapability(server.getClientCapabilities())?.mimeTypes?.includes(RESOURCE_MIME_TYPE);
-  server.setRequestHandler(ListResourcesRequestSchema,async()=>({resources:hasUI()?[{uri:approvalResource,name:'Kloudy action approval',mimeType:RESOURCE_MIME_TYPE}]:[]}));
-  server.setRequestHandler(ReadResourceRequestSchema,async request=>{if(!hasUI()||request.params.uri!==approvalResource)throw Error('Unsupported UI resource');return {contents:[{uri:approvalResource,mimeType:RESOURCE_MIME_TYPE,text:approvalHTML,_meta:{ui:{csp:{connectDomains:[],resourceDomains:[]}}}}]};});
-  async function projectRoot(){try{const roots=await server.listRoots();if(roots.roots?.[0]?.uri?.startsWith('file:'))return fileURLToPath(roots.roots[0].uri);}catch{}return process.env.CLAUDE_PROJECT_DIR||process.cwd();}
-  async function greeting(decision){let project=process.env.CLAUDE_PROJECT_DIR||process.cwd();try{const roots=await server.listRoots();if(roots.roots?.[0]?.uri?.startsWith('file:'))project=fileURLToPath(roots.roots[0].uri);}catch{}return greet({project,decision,hostAttached:true});}
-  server.setRequestHandler(ListPromptsRequestSchema,async()=>({prompts:[{name:'kloudy',description:'Welcome the current project to Kloudy and explain how to use it.'}]}));
-  server.setRequestHandler(GetPromptRequestSchema,async request=>{if(request.params.name!=='kloudy')throw Error('Unknown prompt');const result=await greeting();return {description:'Ask for Kloudy',messages:[{role:'assistant',content:welcomeContent(result)[0]}]};});
-  server.setRequestHandler(ListToolsRequestSchema,async()=>{
-    let selected;try{selected=await useClient(client=>client.state.selection?.tool);}catch{}
-    const meta=hasUI()?{_meta:{ui:{resourceUri:approvalResource}}}:{};return {tools:[{...gateway,...meta},...(selected?[{...selected,name:'selected_'+selected.name,...meta}]:[]),...(hasUI()?[approvalTool]:[])]};
-  });
-  server.setRequestHandler(CallToolRequestSchema,instrumentToolHandler(async request=>{
-    try{
-      const supplied=request.params.arguments||{};
-      if(request.params.name==='kloudy'&&supplied.operation==='models_list'){if(Object.keys(supplied).length!==1)throw Error('Model discovery uses host configuration only');const result=await models().list();return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:result};}
-
-      if(request.params.name==='kloudy'&&['convert','yield_list'].includes(supplied.operation)){const result=await (supplied.operation==='convert'?convertPage(supplied.url,{resolution:supplied.resolution}):convertPages(supplied.urls,{resolution:supplied.resolution}));return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:result};}
-      if(request.params.name==='kloudy_approval'){if(!hasUI())throw Error('This host has no inline approval UI');const result=await approvals.decide(supplied,useClient);return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:result};}
-      if(request.params.name==='kloudy'&&supplied.operation?.startsWith('strings_')){const store=strings({project:await projectRoot(),mode:'auto'}),op=supplied.operation.slice(8);let result;
-       if(op==='save')result=await store.save(supplied.string_name,supplied.choices);
-       else if(op==='call'){result=await store.call(supplied.string_name,supplied.name,supplied.arguments,{selectionId:supplied.selection_id});if(result?.state==='awaiting_approval'){const saved=(await store.list()).find(s=>s.name===supplied.string_name),route=saved?.activeRoutes?.find(r=>r.name===supplied.name&&(!supplied.selection_id||r.selection_id===supplied.selection_id));if(!route)throw Error('Selected route unavailable');return approvals.present(result,route.selection_id,work=>store.connect(route.source,route.kind,work));}}
-       else if(op==='list')result=await store.list();
-       else if(op==='use'){result=await store.use(supplied.string_name);}
-       else if(['keep','remove'].includes(op))result=await store[op](supplied.string_name);
-       else if(op==='prune')result=await store.prune();else throw Error('Unsupported strings operation');
-       return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:Array.isArray(result)?{strings:result}:result};}
-
-      if(request.params.name==='kloudy'&&(!supplied.operation||supplied.operation==='introduce'||supplied.operation==='decline'||supplied.operation==='ask'&&isAttachIntent(supplied.goal))){const result=await greeting(supplied.operation==='decline'?'no':undefined);return {content:welcomeContent(result),structuredContent:result};}
-      const result=await useClient(async client=>{
-        const input=request.params.arguments||{};
-        if(request.params.name.startsWith('selected_'))return client.call(request.params.name.slice(9),input);
-        if(request.params.name!=='kloudy')throw new Error('Unknown tool');
+import {instrumentToolHandler} from './activity.mjs';
+import {configuredModels} from './models.mjs';
+import {actionInput,hostingParams,connectionParams,stableIntentKey} from './product-actions.mjs';
+import {welcomeContent} from './welcome.mjs';
+import {Approvals,approvalTool,approvalResource} from './approval.mjs';
+import {approvalHTML} from './approval-ui.mjs';
+import {getUiCapability,RESOURCE_MIME_TYPE} from '@modelcontextprotocol/ext-apps/server';
+import {convertPage,convertPages} from './public.mjs';
+import {localStrings} from './strings.mjs';
+import {Server} from '@modelcontextprotocol/sdk/server/index.js';
+import {StdioServerTransport} from '@modelcontextprotocol/sdk/server/stdio.js';
+import {ListToolsRequestSchema,CallToolRequestSchema,ListPromptsRequestSchema,GetPromptRequestSchema,ListResourcesRequestSchema,ReadResourceRequestSchema} from '@modelcontextprotocol/sdk/types.js';
+import {fileURLToPath} from 'node:url';
+import {introduce,isAttachIntent,ideGuidance} from './introduce.mjs';
+import {withConnection} from './connection.mjs';
+const gateway={name:'kloudy',description:'Use this whenever the user mentions Kloudy, or asks to find, route, or call any MCP tool or SDK. For Kloudy or /kloudy alone, use introduce to welcome this project; an attached host does not need another install question. Select one tool through the same engine. Autonomous by default; the IDE permission system controls tool calls and the engine enforces authorization.',inputSchema:{type:'object',properties:{operation:{type:'string',enum:['conversation','host_interface','models_list','action','wallet_connection','hosting','wallet','introduce','decline','convert','yield_list','query','ask','assemble','call','status','cancel','strings_list','strings_save','strings_call','strings_use','strings_keep','strings_remove','strings_prune']},conversation_operation:{type:'string',enum:['read','append','sync']},conversation:{type:'object'},action:{type:'string',enum:['chain.head','wallet.prepare','bww.fetch','bww.publish']},inputs:{type:'object'},idempotency_key:{type:'string',maxLength:128},chain:{type:'string',maxLength:100},budget_usd_micros:{type:'integer',minimum:1,maximum:1000000000000},wallet_operation:{type:'string',enum:['balance','top_up']},amount_usd:{type:'string'},goal:{type:'string'},scope:{type:'object'},limit:{type:'integer',minimum:1,maximum:5},url:{type:'string'},urls:{type:'array',minItems:1,maxItems:8,items:{type:'string'}},resolution:{type:'string',enum:['compact','standard']},string_name:{type:'string'},choices:{type:'array',maxItems:16,items:{type:'object',properties:{source:{type:'string'},kind:{type:'string',enum:['mcp','sdk','cli']},goal:{type:'string'}},required:['source','kind','goal'],additionalProperties:false}},selection_ids:{type:'array',items:{type:'string'},minItems:1,maxItems:16,uniqueItems:true},selection_id:{type:'string'},name:{type:'string'},arguments:{type:'object'},candidates:{type:'array',maxItems:16,items:{type:'object'}},lane:{type:'string',enum:['non_medical','medical']}},additionalProperties:false}};
+export function createMcpServer({useClient,greet=introduce,strings=localStrings,models=configuredModels,onActivity}){
+  const server=new Server({name:'kloudy',version:'0.3.15'},{capabilities:{tools:{listChanged:true},prompts:{},resources:{}},instructions:'When the user says Kloudy or /kloudy, use operation introduce. Return the current project greeting. Do not repeatedly ask to install an already attached tool. Respect a no answer and the host permission ceiling. '+Object.values(ideGuidance).join(' ')});
+  const approvals=new Approvals(),hasUI=()=>getUiCapability(server.getClientCapabilities())?.mimeTypes?.includes(RESOURCE_MIME_TYPE);
+  server.setRequestHandler(ListResourcesRequestSchema,async()=>({resources:hasUI()?[{uri:approvalResource,name:'Kloudy action approval',mimeType:RESOURCE_MIME_TYPE}]:[]}));
+  server.setRequestHandler(ReadResourceRequestSchema,async request=>{if(!hasUI()||request.params.uri!==approvalResource)throw Error('Unsupported UI resource');return {contents:[{uri:approvalResource,mimeType:RESOURCE_MIME_TYPE,text:approvalHTML,_meta:{ui:{csp:{connectDomains:[],resourceDomains:[]}}}}]};});
+  async function projectRoot(){try{const roots=await server.listRoots();if(roots.roots?.[0]?.uri?.startsWith('file:'))return fileURLToPath(roots.roots[0].uri);}catch{}return process.env.CLAUDE_PROJECT_DIR||process.cwd();}
+  async function greeting(decision){let project=process.env.CLAUDE_PROJECT_DIR||process.cwd();try{const roots=await server.listRoots();if(roots.roots?.[0]?.uri?.startsWith('file:'))project=fileURLToPath(roots.roots[0].uri);}catch{}return greet({project,decision,hostAttached:true});}
+  server.setRequestHandler(ListPromptsRequestSchema,async()=>({prompts:[{name:'kloudy',description:'Welcome the current project to Kloudy and explain how to use it.'}]}));
+  server.setRequestHandler(GetPromptRequestSchema,async request=>{if(request.params.name!=='kloudy')throw Error('Unknown prompt');const result=await greeting();return {description:'Ask for Kloudy',messages:[{role:'assistant',content:welcomeContent(result)[0]}]};});
+  server.setRequestHandler(ListToolsRequestSchema,async()=>{
+    let selected;try{selected=await useClient(client=>client.state.selection?.tool);}catch{}
+    const meta=hasUI()?{_meta:{ui:{resourceUri:approvalResource}}}:{};return {tools:[{...gateway,...meta},...(selected?[{...selected,name:'selected_'+selected.name,...meta}]:[]),...(hasUI()?[approvalTool]:[])]};
+  });
+  server.setRequestHandler(CallToolRequestSchema,instrumentToolHandler(async request=>{
+    try{
+      const supplied=request.params.arguments||{};
+      if(request.params.name==='kloudy'&&supplied.operation==='models_list'){if(Object.keys(supplied).length!==1)throw Error('Model discovery uses host configuration only');const result=await models().list();return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:result};}
+
+      if(request.params.name==='kloudy'&&['convert','yield_list'].includes(supplied.operation)){const result=await (supplied.operation==='convert'?convertPage(supplied.url,{resolution:supplied.resolution}):convertPages(supplied.urls,{resolution:supplied.resolution}));return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:result};}
+      if(request.params.name==='kloudy_approval'){if(!hasUI())throw Error('This host has no inline approval UI');const result=await approvals.decide(supplied,useClient);return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:result};}
+      if(request.params.name==='kloudy'&&supplied.operation?.startsWith('strings_')){const store=strings({project:await projectRoot(),mode:'auto'}),op=supplied.operation.slice(8);let result;
+       if(op==='save')result=await store.save(supplied.string_name,supplied.choices);
+       else if(op==='call'){result=await store.call(supplied.string_name,supplied.name,supplied.arguments,{selectionId:supplied.selection_id});if(result?.state==='awaiting_approval'){const saved=(await store.list()).find(s=>s.name===supplied.string_name),route=saved?.activeRoutes?.find(r=>r.name===supplied.name&&(!supplied.selection_id||r.selection_id===supplied.selection_id));if(!route)throw Error('Selected route unavailable');return approvals.present(result,route.selection_id,work=>store.connect(route.source,route.kind,work));}}
+       else if(op==='list')result=await store.list();
+       else if(op==='use'){result=await store.use(supplied.string_name);}
+       else if(['keep','remove'].includes(op))result=await store[op](supplied.string_name);
+       else if(op==='prune')result=await store.prune();else throw Error('Unsupported strings operation');
+       return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:Array.isArray(result)?{strings:result}:result};}
+
+      if(request.params.name==='kloudy'&&(!supplied.operation||supplied.operation==='introduce'||supplied.operation==='decline'||supplied.operation==='ask'&&isAttachIntent(supplied.goal))){const result=await greeting(supplied.operation==='decline'?'no':undefined);return {content:welcomeContent(result),structuredContent:result};}
+      const result=await useClient(async client=>{
+        const input=request.params.arguments||{};
+        if(request.params.name.startsWith('selected_'))return client.call(request.params.name.slice(9),input);
+        if(request.params.name!=='kloudy')throw new Error('Unknown tool');
         if(input.operation==='conversation'){if(!client.conversation)throw Error('Conversation sync requires a scoped HTTPK connection');return client.conversation(input.conversation_operation,input.conversation);}
-        if(input.operation==='host_interface')return client.negotiateHost();
-        if(input.operation==='action')return client.action(input.action,input.inputs,{idempotencyKey:input.idempotency_key});
-        if(input.operation==='wallet_connection')return client.walletConnection(input.chain);
-        if(input.operation==='hosting')return client.hosting({budgetUsdMicros:input.budget_usd_micros});
-        if(input.operation==='wallet'){if(!client.wallet)throw Error('Wallet previews require HTTPK');return client.wallet({operation:input.wallet_operation||'balance',amount_usd:input.amount_usd});}
-        if(input.operation==='query'){if(!client.query)throw Error('Query needs an HTTPK connection');return client.query(input.goal,{scope:input.scope,limit:input.limit});}
-        if(input.operation==='ask')return client.ask(input.goal,{candidates:input.candidates||[],lane:input.lane||'non_medical'});
-        if(input.operation==='assemble'){if(!client.assemble)throw Error('Assembly requires an HTTPK connection');return client.assemble(input.selection_ids);}
-        if(input.operation==='call'){if(!client.assemble||!input.selection_id)throw Error('Exact HTTPK selection required');return client.call(input.name,input.arguments,{selectionId:input.selection_id});}
-        if(input.operation==='status')return client.status();
-        if(input.operation==='cancel')return client.decide('cancel');
-        throw new Error('Unsupported operation');
-      });
-      // Prompt the host to fetch the newly selected singular tool, not a server dump.
-      server.sendToolListChanged().catch(()=>{});
-      if(result?.state==='awaiting_approval')return approvals.present(result,result.selection_id);
-      return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:result};
-    }catch(error){return {isError:true,content:[{type:'text',text:JSON.stringify({error:error.code||'request_failed',message:error.code?error.message:'The tool request could not be completed.'})}]};}
-  },onActivity));
-  return server;
-}
-export async function serveMcp(connection){const server=createMcpServer({useClient:work=>withConnection(connection,work,{mode:'auto'}),greet:options=>introduce({...options,connection})});await server.connect(new StdioServerTransport());return server;}
+        if(input.operation==='host_interface')return client.negotiateHost();
+        if(input.operation==='action')return client.action(input.action,input.inputs,{idempotencyKey:input.idempotency_key});
+        if(input.operation==='wallet_connection')return client.walletConnection(input.chain);
+        if(input.operation==='hosting')return client.hosting({budgetUsdMicros:input.budget_usd_micros});
+        if(input.operation==='wallet'){if(!client.wallet)throw Error('Wallet previews require HTTPK');return client.wallet({operation:input.wallet_operation||'balance',amount_usd:input.amount_usd});}
+        if(input.operation==='query'){if(!client.query)throw Error('Query needs an HTTPK connection');return client.query(input.goal,{scope:input.scope,limit:input.limit});}
+        if(input.operation==='ask')return client.ask(input.goal,{candidates:input.candidates||[],lane:input.lane||'non_medical'});
+        if(input.operation==='assemble'){if(!client.assemble)throw Error('Assembly requires an HTTPK connection');return client.assemble(input.selection_ids);}
+        if(input.operation==='call'){if(!client.assemble||!input.selection_id)throw Error('Exact HTTPK selection required');return client.call(input.name,input.arguments,{selectionId:input.selection_id});}
+        if(input.operation==='status')return client.status();
+        if(input.operation==='cancel')return client.decide('cancel');
+        throw new Error('Unsupported operation');
+      });
+      // Prompt the host to fetch the newly selected singular tool, not a server dump.
+      server.sendToolListChanged().catch(()=>{});
+      if(result?.state==='awaiting_approval')return approvals.present(result,result.selection_id);
+      return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:result};
+    }catch(error){return {isError:true,content:[{type:'text',text:JSON.stringify({error:error.code||'request_failed',message:error.code?error.message:'The tool request could not be completed.'})}]};}
+  },onActivity));
+  return server;
+}
+export async function serveMcp(connection){const server=createMcpServer({useClient:work=>withConnection(connection,work,{mode:'auto'}),greet:options=>introduce({...options,connection})});await server.connect(new StdioServerTransport());return server;}

package/src/models.mjs

@@ -1,55 +1,55 @@
-// User-owned compute adapter. No provider provisioning, routing or vault lives here.
-import {KloudyError} from './client.mjs';
-const fail=(code,message)=>{throw new KloudyError(code,message);};
-const modelName=value=>typeof value==='string'&&/^[a-zA-Z0-9][a-zA-Z0-9._:/@+-]{0,199}$/.test(value);
-export class ModelClient {
- constructor({endpoint='http://127.0.0.1:11434/v1',resolveKey=async()=>null,fetcher=fetch,timeoutMs=90000}={}){
-  let url;try{url=new URL(endpoint);}catch{}
-  const local=url&&['127.0.0.1','[::1]','localhost'].includes(url.hostname);
-  if(!url||url.username||url.password||url.search||url.hash||!(url.protocol==='https:'||url.protocol==='http:'&&local))fail('invalid_model_endpoint','Use your HTTPS model endpoint or local Ollama endpoint without credentials in the URL.');
-  if(typeof resolveKey!=='function'||!Number.isInteger(timeoutMs)||timeoutMs<1||timeoutMs>120000)fail('invalid_model_config','Invalid model client configuration.');
-  this.endpoint=url.href.replace(/\/$/,'');this.local=local;this.ollama=local&&url.port==='11434'&&url.pathname.replace(/\/$/,'')==='/v1';this.resolveKey=resolveKey;this.fetcher=fetcher;this.timeoutMs=timeoutMs;
- }
- async request(path,body){
-  let key;try{key=await this.resolveKey();}catch{fail('model_key_unavailable','The host key resolver is unavailable.');}
-  if(key!=null&&(typeof key!=='string'||!key||key.length>8192||/[\r\n]/.test(key)))fail('model_key_unavailable','The configured model credential is unavailable.');
-  if(!this.local&&!key)fail('model_key_unavailable','Connect your own gateway credential through your host’s protected key resolver.');
-  try{
-   const target=path==='/api/tags'&&this.ollama?new URL('/api/tags',this.endpoint).href:this.endpoint+path;
-   const response=await this.fetcher(target,{method:body?'POST':'GET',redirect:'error',signal:AbortSignal.timeout(this.timeoutMs),headers:{accept:'application/json',...(key?{authorization:'Bearer '+key}:{}),...(body?{'content-type':'application/json'}:{})},...(body?{body:JSON.stringify(body)}:{})});
-   if(!response.ok)fail(response.status===401||response.status===403?'model_authorization_required':'model_unavailable','Your model endpoint rejected the request. Nothing was retried.');
-   if(!response.headers.get('content-type')?.includes('application/json'))fail('invalid_model_response','Expected a JSON model response.');
-   const reader=response.body.getReader();let size=0,chunks=[];
-   try{for(;;){const {done,value}=await reader.read();if(done)break;size+=value.length;if(size>1048576)fail('model_response_limit','Model response exceeds the limit.');chunks.push(value);}}finally{await reader.cancel().catch(()=>{});}
-   const bytes=new Uint8Array(size);let offset=0;for(const chunk of chunks){bytes.set(chunk,offset);offset+=chunk.length;}
-   let result;try{result=JSON.parse(new TextDecoder().decode(bytes));}catch{fail('invalid_model_response','Expected a valid JSON model response.');}
-   // An upstream error/body must not echo a gateway secret into a tool result.
-   if(key&&JSON.stringify(result).includes(key))fail('invalid_model_response','Model response contained protected connection data.');
-   return result;
-  }catch(error){if(error instanceof KloudyError)throw error;fail('model_unavailable','Your model endpoint is unavailable. Nothing was retried.');}
- }
- async list(){
-  const response=await this.request('/models');
-  if(!Array.isArray(response?.data)||response.data.length>512||response.data.some(x=>!modelName(x?.id)))fail('invalid_model_catalog','The model endpoint returned an invalid catalog.');
-  return {schema:'kloudy.models/1',state:'reachable',compute:this.local?'local_endpoint':'user_provider',provider_bill:'user',inference_verified:false,models:[...new Set(response.data.map(x=>x.id))].slice(0,128).map(id=>({id,status:'advertised'})),truncated:new Set(response.data.map(x=>x.id)).size>128};
- }
- async complete({model,prompt,maxTokens=128,allowProviderCharge=false}={}){
-  if(!modelName(model)||typeof prompt!=='string'||!prompt.trim()||prompt.length>16000||!Number.isInteger(maxTokens)||maxTokens<1||maxTokens>4096||typeof allowProviderCharge!=='boolean')fail('invalid_model_request','Supply a model, bounded prompt and token limit.');
-  if(!this.ollama&&!allowProviderCharge)fail('provider_charge_approval_required','Explicit authorization is required before using a provider through this endpoint.');
-  const catalog=await this.list();if(!catalog.models.some(x=>x.id===model))fail('model_not_available','That model is not advertised by your endpoint.');
-  if(this.ollama&&!allowProviderCharge){
-   const tags=await this.request('/api/tags');
-   const installed=tags?.models?.find(x=>x.name===model||x.model===model);
-   if(!installed||!Number.isSafeInteger(installed.size)||installed.size<=0||installed.remote_host||installed.remote_model||/:cloud(?:$|[-:])/.test(model))fail('provider_charge_approval_required','This model is not verified as locally installed. Review its provider cost before running it.');
-  }
-  const result=await this.request('/chat/completions',{model,messages:[{role:'user',content:prompt}],max_tokens:maxTokens,stream:false});
-  const text=result?.choices?.[0]?.message?.content;
-  if(typeof text!=='string'||!text.trim()||text.length>32000)fail('invalid_model_response','The model did not return a bounded text answer.');
-  return {schema:'kloudy.model-result/1',model,text,compute:catalog.compute,provider_bill:'user',usage:result.usage&&['prompt_tokens','completion_tokens','total_tokens'].every(k=>Number.isSafeInteger(result.usage[k])&&result.usage[k]>=0)?Object.fromEntries(['prompt_tokens','completion_tokens','total_tokens'].map(k=>[k,result.usage[k]])):null};
- }
-}
-export function configuredModels(env=process.env){
- const name=env.KLOUDY_MODEL_KEY_ENV;
- if(name&&!/^[A-Z][A-Z0-9_]{0,99}$/.test(name))fail('invalid_model_config','Use a credential environment reference, never the key itself.');
- return new ModelClient({endpoint:env.KLOUDY_MODEL_ENDPOINT||undefined,resolveKey:async()=>name?env[name]??null:null});
-}
+// User-owned compute adapter. No provider provisioning, routing or vault lives here.
+import {KloudyError} from './client.mjs';
+const fail=(code,message)=>{throw new KloudyError(code,message);};
+const modelName=value=>typeof value==='string'&&/^[a-zA-Z0-9][a-zA-Z0-9._:/@+-]{0,199}$/.test(value);
+export class ModelClient {
+ constructor({endpoint='http://127.0.0.1:11434/v1',resolveKey=async()=>null,fetcher=fetch,timeoutMs=90000}={}){
+  let url;try{url=new URL(endpoint);}catch{}
+  const local=url&&['127.0.0.1','[::1]','localhost'].includes(url.hostname);
+  if(!url||url.username||url.password||url.search||url.hash||!(url.protocol==='https:'||url.protocol==='http:'&&local))fail('invalid_model_endpoint','Use your HTTPS model endpoint or local Ollama endpoint without credentials in the URL.');
+  if(typeof resolveKey!=='function'||!Number.isInteger(timeoutMs)||timeoutMs<1||timeoutMs>120000)fail('invalid_model_config','Invalid model client configuration.');
+  this.endpoint=url.href.replace(/\/$/,'');this.local=local;this.ollama=local&&url.port==='11434'&&url.pathname.replace(/\/$/,'')==='/v1';this.resolveKey=resolveKey;this.fetcher=fetcher;this.timeoutMs=timeoutMs;
+ }
+ async request(path,body){
+  let key;try{key=await this.resolveKey();}catch{fail('model_key_unavailable','The host key resolver is unavailable.');}
+  if(key!=null&&(typeof key!=='string'||!key||key.length>8192||/[\r\n]/.test(key)))fail('model_key_unavailable','The configured model credential is unavailable.');
+  if(!this.local&&!key)fail('model_key_unavailable','Connect your own gateway credential through your host’s protected key resolver.');
+  try{
+   const target=path==='/api/tags'&&this.ollama?new URL('/api/tags',this.endpoint).href:this.endpoint+path;
+   const response=await this.fetcher(target,{method:body?'POST':'GET',redirect:'error',signal:AbortSignal.timeout(this.timeoutMs),headers:{accept:'application/json',...(key?{authorization:'Bearer '+key}:{}),...(body?{'content-type':'application/json'}:{})},...(body?{body:JSON.stringify(body)}:{})});
+   if(!response.ok)fail(response.status===401||response.status===403?'model_authorization_required':'model_unavailable','Your model endpoint rejected the request. Nothing was retried.');
+   if(!response.headers.get('content-type')?.includes('application/json'))fail('invalid_model_response','Expected a JSON model response.');
+   const reader=response.body.getReader();let size=0,chunks=[];
+   try{for(;;){const {done,value}=await reader.read();if(done)break;size+=value.length;if(size>1048576)fail('model_response_limit','Model response exceeds the limit.');chunks.push(value);}}finally{await reader.cancel().catch(()=>{});}
+   const bytes=new Uint8Array(size);let offset=0;for(const chunk of chunks){bytes.set(chunk,offset);offset+=chunk.length;}
+   let result;try{result=JSON.parse(new TextDecoder().decode(bytes));}catch{fail('invalid_model_response','Expected a valid JSON model response.');}
+   // An upstream error/body must not echo a gateway secret into a tool result.
+   if(key&&JSON.stringify(result).includes(key))fail('invalid_model_response','Model response contained protected connection data.');
+   return result;
+  }catch(error){if(error instanceof KloudyError)throw error;fail('model_unavailable','Your model endpoint is unavailable. Nothing was retried.');}
+ }
+ async list(){
+  const response=await this.request('/models');
+  if(!Array.isArray(response?.data)||response.data.length>512||response.data.some(x=>!modelName(x?.id)))fail('invalid_model_catalog','The model endpoint returned an invalid catalog.');
+  return {schema:'kloudy.models/1',state:'reachable',compute:this.local?'local_endpoint':'user_provider',provider_bill:'user',inference_verified:false,models:[...new Set(response.data.map(x=>x.id))].slice(0,128).map(id=>({id,status:'advertised'})),truncated:new Set(response.data.map(x=>x.id)).size>128};
+ }
+ async complete({model,prompt,maxTokens=128,allowProviderCharge=false}={}){
+  if(!modelName(model)||typeof prompt!=='string'||!prompt.trim()||prompt.length>16000||!Number.isInteger(maxTokens)||maxTokens<1||maxTokens>4096||typeof allowProviderCharge!=='boolean')fail('invalid_model_request','Supply a model, bounded prompt and token limit.');
+  if(!this.ollama&&!allowProviderCharge)fail('provider_charge_approval_required','Explicit authorization is required before using a provider through this endpoint.');
+  const catalog=await this.list();if(!catalog.models.some(x=>x.id===model))fail('model_not_available','That model is not advertised by your endpoint.');
+  if(this.ollama&&!allowProviderCharge){
+   const tags=await this.request('/api/tags');
+   const installed=tags?.models?.find(x=>x.name===model||x.model===model);
+   if(!installed||!Number.isSafeInteger(installed.size)||installed.size<=0||installed.remote_host||installed.remote_model||/:cloud(?:$|[-:])/.test(model))fail('provider_charge_approval_required','This model is not verified as locally installed. Review its provider cost before running it.');
+  }
+  const result=await this.request('/chat/completions',{model,messages:[{role:'user',content:prompt}],max_tokens:maxTokens,stream:false});
+  const text=result?.choices?.[0]?.message?.content;
+  if(typeof text!=='string'||!text.trim()||text.length>32000)fail('invalid_model_response','The model did not return a bounded text answer.');
+  return {schema:'kloudy.model-result/1',model,text,compute:catalog.compute,provider_bill:'user',usage:result.usage&&['prompt_tokens','completion_tokens','total_tokens'].every(k=>Number.isSafeInteger(result.usage[k])&&result.usage[k]>=0)?Object.fromEntries(['prompt_tokens','completion_tokens','total_tokens'].map(k=>[k,result.usage[k]])):null};
+ }
+}
+export function configuredModels(env=process.env){
+ const name=env.KLOUDY_MODEL_KEY_ENV;
+ if(name&&!/^[A-Z][A-Z0-9_]{0,99}$/.test(name))fail('invalid_model_config','Use a credential environment reference, never the key itself.');
+ return new ModelClient({endpoint:env.KLOUDY_MODEL_ENDPOINT||undefined,resolveKey:async()=>name?env[name]??null:null});
+}

package/src/preferences-card.mjs

@@ -0,0 +1,21 @@
+import {preferencesHTML} from './preferences-ui.mjs';
+export const SAMPLE_URI='ui://widget/kloudy-sample-v1.html';
+export const sampleTool={
+ name:'show_tool_preferences_card',title:'Tool preferences card',
+ description:'Show three short questions about preferred tool types, where projects run, and how tool updates appear. Use when the user wants to set or change these preferences. Displays choices only; does not install or run tools. Show once, not for every tool.',
+ annotations:{readOnlyHint:true,destructiveHint:false,idempotentHint:true,openWorldHint:false},
+ inputSchema:{type:'object',properties:{
+  kind:{type:'string',enum:['preferences'],description:'Show the three tool-preference questions.'},
+  surface:{type:'string',enum:['ide','chatbot','site'],default:'chatbot',description:'Where the card appears: an editor, a chatbot, or the Kloudy website. Changes wording only.'}
+ },required:['kind'],additionalProperties:false},
+ _meta:{ui:{resourceUri:SAMPLE_URI},'openai/outputTemplate':SAMPLE_URI}
+};
+export const sampleResource={uri:SAMPLE_URI,name:'Tool preferences card',description:'Three questions about tools, project location and updates.',mimeType:'text/html;profile=mcp-app'};
+export function sampleArguments(a){return !!a&&typeof a==='object'&&!Array.isArray(a)&&Object.keys(a).every(k=>['kind','surface'].includes(k))&&a.kind==='preferences'&&(a.surface===undefined||['ide','chatbot','site'].includes(a.surface));}
+export function sampleMessage(method,params){return !!params&&typeof params==='object'&&!Array.isArray(params)&&(method==='resources/read'&&params.uri===SAMPLE_URI&&Object.keys(params).length===1||method==='tools/call'&&['show_tool_preferences_card','kloudy_sample_card'].includes(params.name)&&Object.keys(params).every(k=>['name','arguments'].includes(k))&&sampleArguments(params.arguments));}
+export function sampleResult(kind='preferences',surface='chatbot'){
+ if(!sampleArguments({kind,surface}))throw Error('Choose tool preferences.');
+ const url='https://kloudy.ai/samples?frontdoor='+surface;
+ return {content:[{type:'text',text:`Tool preferences card\n\n[Choose your tools, project location and updates](${url})\n\nThese choices do not install or run tools.`}],structuredContent:{version:'kloudy.sample/1',kind,surface,url,executed:false,authorizesSpending:false}};
+}
+export function sampleContents(){return {contents:[{uri:SAMPLE_URI,mimeType:sampleResource.mimeType,text:preferencesHTML,_meta:{ui:{prefersBorder:true,domain:'https://kloudy.ai',csp:{connectDomains:[],resourceDomains:[]}},'openai/widgetDescription':'Three short questions about tool preferences.','openai/widgetPrefersBorder':true,'openai/widgetCSP':{connect_domains:[],resource_domains:[]},'openai/widgetDomain':'https://kloudy.ai'}}]};}