kloudy 0.4.7 → 1.0.0

package/src/approval.mjs

@@ -1,25 +1,25 @@
-import {randomUUID} from 'node:crypto';
-export const approvalResource='ui://kloudy/approval.html';
-export const approvalTool={name:'kloudy_approval',description:'Submit the exact pending decision from the Kloudy approval view.',inputSchema:{type:'object',properties:{ticket:{type:'string'},decision:{type:'string',enum:['approve','cancel']}},required:['ticket','decision'],additionalProperties:false},_meta:{ui:{resourceUri:approvalResource,visibility:['app']}}};
-export class Approvals {
- constructor({now=()=>Date.now()}={}){this.now=now;this.pending=new Map();}
- present(result,selectionId,connection){
-  if(result?.state!=='awaiting_approval')return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:result};
-  const a=result.approval,expires=Number(a?.expires_at)*1000,risk=a?.risk_tier??a?.risk;
-  // Do not fabricate a token or let incomplete backend state create an approval.
-  if(!a||typeof a.token!=='string'||!a.token||a.token.length>512||typeof risk!=='string'||!risk.trim()||risk.length>64||!(typeof a.summary==='string'||a.summary&&typeof a.summary==='object')||!selectionId||!Number.isFinite(expires)||expires<=this.now())return {isError:true,content:[{type:'text',text:'The exact approval is missing or expired. Refresh the engine request.'}]};
-  for(const [id,p] of this.pending)if(p.expires<=this.now())this.pending.delete(id);
-  if(this.pending.size>=32)throw Error('Too many pending approvals');
-  const ticket=randomUUID();this.pending.set(ticket,{selectionId,token:a.token,expires,connection});
-  const summary={state:result.state,summary:a.summary,risk_tier:a.risk_tier??a.risk,expires_at:a.expires_at,notice:'Approve or cancel using the inline Kloudy view. Hosts without MCP Apps must provide their own consent UI; no approval was submitted.'};
-  return {content:[{type:'text',text:JSON.stringify(summary)}],structuredContent:summary,_meta:{kloudyApproval:{...summary,ticket},ui:{resourceUri:approvalResource}}};
- }
- async decide(input,useClient){
-  if(!input||Object.keys(input).some(k=>!['ticket','decision'].includes(k))||!['approve','cancel'].includes(input.decision))throw Error('Invalid approval decision');
-  const pending=this.pending.get(input.ticket);if(!pending||pending.expires<=this.now()){this.pending.delete(input.ticket);throw Error('Approval missing or expired');}
-  // Consume before dispatch, including an ambiguous network failure. Never retry
-  // a mutation silently; the host must inspect the engine receipt afterwards.
-  this.pending.delete(input.ticket);
-  return (pending.connection||useClient)(client=>input.decision==='approve'?client.confirm({selectionId:pending.selectionId,token:pending.token,decision:'approve',source:'tap'}):client.rpc('kloudy/cancel',{selection_id:pending.selectionId}));
- }
-}
+import {randomUUID} from 'node:crypto';
+export const approvalResource='ui://kloudy/approval.html';
+export const approvalTool={name:'kloudy_approval',description:'Submit the exact pending decision from the Kloudy approval view.',inputSchema:{type:'object',properties:{ticket:{type:'string'},decision:{type:'string',enum:['approve','cancel']}},required:['ticket','decision'],additionalProperties:false},_meta:{ui:{resourceUri:approvalResource,visibility:['app']}}};
+export class Approvals {
+ constructor({now=()=>Date.now()}={}){this.now=now;this.pending=new Map();}
+ present(result,selectionId,connection){
+  if(result?.state!=='awaiting_approval')return {content:[{type:'text',text:JSON.stringify(result)}],structuredContent:result};
+  const a=result.approval,expires=Number(a?.expires_at)*1000,risk=a?.risk_tier??a?.risk;
+  // Do not fabricate a token or let incomplete backend state create an approval.
+  if(!a||typeof a.token!=='string'||!a.token||a.token.length>512||typeof risk!=='string'||!risk.trim()||risk.length>64||!(typeof a.summary==='string'||a.summary&&typeof a.summary==='object')||!selectionId||!Number.isFinite(expires)||expires<=this.now())return {isError:true,content:[{type:'text',text:'The exact approval is missing or expired. Refresh the engine request.'}]};
+  for(const [id,p] of this.pending)if(p.expires<=this.now())this.pending.delete(id);
+  if(this.pending.size>=32)throw Error('Too many pending approvals');
+  const ticket=randomUUID();this.pending.set(ticket,{selectionId,token:a.token,expires,connection});
+  const summary={state:result.state,summary:a.summary,risk_tier:a.risk_tier??a.risk,expires_at:a.expires_at,notice:'Approve or cancel using the inline Kloudy view. Hosts without MCP Apps must provide their own consent UI; no approval was submitted.'};
+  return {content:[{type:'text',text:JSON.stringify(summary)}],structuredContent:summary,_meta:{kloudyApproval:{...summary,ticket},ui:{resourceUri:approvalResource}}};
+ }
+ async decide(input,useClient){
+  if(!input||Object.keys(input).some(k=>!['ticket','decision'].includes(k))||!['approve','cancel'].includes(input.decision))throw Error('Invalid approval decision');
+  const pending=this.pending.get(input.ticket);if(!pending||pending.expires<=this.now()){this.pending.delete(input.ticket);throw Error('Approval missing or expired');}
+  // Consume before dispatch, including an ambiguous network failure. Never retry
+  // a mutation silently; the host must inspect the engine receipt afterwards.
+  this.pending.delete(input.ticket);
+  return (pending.connection||useClient)(client=>input.decision==='approve'?client.confirm({selectionId:pending.selectionId,token:pending.token,decision:'approve',source:'tap'}):client.rpc('kloudy/cancel',{selection_id:pending.selectionId}));
+ }
+}

package/src/autoupdate.mjs

@@ -1,2 +1,2 @@
-// Invalid and unset rollout modes fail closed. Configuration never enables itself.
-export const autoupdateEnabled=mode=>mode==='meta'||mode==='notify';
+// Invalid and unset rollout modes fail closed. Configuration never enables itself.
+export const autoupdateEnabled=mode=>mode==='meta'||mode==='notify';

package/src/bots.mjs

@@ -0,0 +1,144 @@
+// `kloudy bots` — offline-first deployable-bots catalog.
+//   kloudy bots list   [--status verified|untested|reported-broken] [--kind http|npx|uvx|botboozle|hf] [--modality m] [--all-modalities] [--device d] [--limit n] [--offset n] [--json]
+//   kloudy bots search <words> [same flags]
+//   kloudy bots get    <id> [--json]
+//   kloudy bots sync                      download the full catalog to the local cache
+//   kloudy bots probe  <id>               HTTPK: MCP initialize + tools/list against a verified HTTP bot
+//   --api <base> or KLOUDY_API=<base>     use that server (e.g. http://127.0.0.1:4360) live, cache as fallback
+//   kloudy bots works|broken <id>         tell Kloudy whether a bot worked for you (free, keyless, no personal data)
+// Lookup order: bundled catalog (if this build ships one) -> ~/.cache/kloudy/deployable-bots.json.gz -> live API.
+import {readFileSync,writeFileSync,mkdirSync,existsSync} from 'node:fs';
+import {gunzipSync} from 'node:zlib';
+import {homedir} from 'node:os';
+import {join} from 'node:path';
+import {modalityWant,rowMatchesModalities,primarySortHint} from './modalities.mjs';
+let BASE=process.env.KLOUDY_BOTS_API||(process.env.KLOUDY_API?process.env.KLOUDY_API.replace(/\/$/,'')+'/api/deployable-bots':'https://kloudy.ai/api/deployable-bots');
+let EXPLICIT=!!(process.env.KLOUDY_BOTS_API||process.env.KLOUDY_API);
+const cacheDir=()=>process.env.KLOUDY_CACHE_DIR||join(process.env.XDG_CACHE_HOME||join(homedir(),'.cache'),'kloudy');
+const cacheFile=()=>join(cacheDir(),'deployable-bots.json.gz');
+const bundled=[new URL('./deployable-bots.json.gz',import.meta.url)];
+const words=s=>String(s||'').toLowerCase().split(/[^\p{L}\p{N}_]+/u).filter(w=>w.length>1);
+function decode(buf){const d=JSON.parse(gunzipSync(buf));return d.bots.map(r=>{const [id,name,kind,cls,endpoint,license,url,score,caps,targets,botboozle,source,meta]=r;return {id,name,kind,cls,endpoint,license,url,score,caps,targets,botboozle,source,meta,modalities:meta?.modalities||[],modality_primary:meta?.modalityPrimary||null};}).filter(b=>b.cls!=='D');}
+export function loadLocal(){
+  for(const p of [cacheFile(),...bundled])try{if(existsSync(p))return {source:String(p),bots:decode(readFileSync(p))};}catch{}
+  return null;
+}
+
+function localEndpoints(b){
+  if(Array.isArray(b.meta?.connect)&&b.meta.connect.length){
+    return b.meta.connect.map(ep=>{
+      const out={type:ep.type};
+      if(ep.url)out.url=ep.url;
+      if(ep.value)out.command=ep.value;
+      if(ep.os)out.os=ep.os;
+      if(ep.protocol)out.protocol=ep.protocol;
+      return out;
+    });
+  }
+  if(b.kind==='http')return [{type:'mcp-http',url:b.endpoint}];
+  return [{type:b.kind==='hf'?b.kind:'local-'+b.kind,command:b.endpoint}];
+}
+function formatHfGet(bot){
+  const h=bot.meta?.hf||{};
+  const lines=[`${bot.id}  [hf]${bot.license?'  '+bot.license:''}`];
+  if(h.repo)lines.push('Repo: '+h.repo);
+  if(h.revision)lines.push('Revision: '+h.revision);
+  if(h.total_size)lines.push('Size: '+h.total_size);
+  if(h.runner)lines.push('Runner: '+h.runner);
+  if(bot.license)lines.push('License: '+bot.license);
+  lines.push('');
+  lines.push('Connect (files are not downloaded automatically; say yes before any fetch):');
+  const steps=(bot.meta?.connect||[]).filter(ep=>ep.type!=='source');
+  if(!steps.length&&bot.endpoint)lines.push('  '+bot.endpoint);
+  for(const ep of steps){
+    const val=ep.value||ep.url||'';
+    const os=ep.os?` (${ep.os})`:'';
+    if(val)lines.push(`  [${ep.type}${os}] ${val}`);
+  }
+  if(bot.url)lines.push('Source: '+bot.url);
+  lines.push('');
+  lines.push('Nothing is installed or downloaded until you say yes.');
+  return lines.join('\n');
+}
+
+const TIER={A:0,C:1,O:2,B:3};
+export function localSearch(bots,{q='',status,kind,device,modality,modalities,allModalities=false,limit=25,offset=0}={}){
+  const terms=words(q);let pool=bots.map((b,i)=>({b,i,hits:terms.filter(t=>(b.name+' '+b.id+' '+b.caps.join(' ')).toLowerCase().includes(t)).length}));
+  if(terms.length)pool=pool.filter(x=>x.hits);
+  pool=pool.map(x=>({...x,status:x.b.cls==='A'?'verified':'untested'}));
+  if(status)pool=pool.filter(x=>x.status===status);if(kind)pool=pool.filter(x=>x.b.kind===kind);if(device)pool=pool.filter(x=>x.b.targets.includes(device));
+  const want=modalityWant(modality||modalities);
+  if(want.length)pool=pool.filter(x=>rowMatchesModalities(x.b.modalities,want,{all:!!allModalities}));
+  pool.sort((x,y)=>TIER[x.b.cls]-TIER[y.b.cls]||primarySortHint(y.b.modality_primary,want)-primarySortHint(x.b.modality_primary,want)||y.hits-x.hits||y.b.score-x.b.score||x.i-y.i);
+  return {matched:pool.length,offset,items:pool.slice(offset,offset+limit).map(({b,status})=>({id:b.id,name:b.name,kind:b.kind,status,endpoints:localEndpoints(b),free:true,needs_botboozle:!!b.botboozle,works_count:null,broken_count:null,license:b.license,source_url:b.url,devices:b.targets,modalities:b.modalities||[],modality_primary:b.modality_primary||null,meta:b.meta||undefined}))};
+}
+async function remote(path,init){const r=await fetch(BASE+path,{...init,signal:AbortSignal.timeout(8000)});const body=await r.json().catch(()=>({}));if(!r.ok)throw Object.assign(new Error(body.error||'HTTP '+r.status),{status:r.status});return body;}
+// HTTPK fetch: MCP streamable-http initialize + tools/list (read-only; no tools are called).
+export async function mcpProbe(url){
+  const h={'content-type':'application/json',accept:'application/json, text/event-stream'};
+  const rpc=async(body,extra={})=>{const r=await fetch(url,{method:'POST',headers:{...h,...extra},body:JSON.stringify(body),signal:AbortSignal.timeout(15000)});
+    const t=await r.text();if(!r.ok&&r.status!==202)throw new Error('MCP HTTP '+r.status);
+    const msg=r.headers.get('content-type')?.includes('event-stream')?t.split('\n').filter(l=>l.startsWith('data:')).map(l=>{try{return JSON.parse(l.slice(5))}catch{return null}}).find(m=>m&&m.id===body.id):t?JSON.parse(t):null;
+    return {msg,session:r.headers.get('mcp-session-id')};};
+  const init=await rpc({jsonrpc:'2.0',id:1,method:'initialize',params:{protocolVersion:'2025-06-18',capabilities:{},clientInfo:{name:'kloudy-bots',version:'0.1'}}});
+  const s=init.session?{'mcp-session-id':init.session}:{};
+  await fetch(url,{method:'POST',headers:{...h,...s},body:JSON.stringify({jsonrpc:'2.0',method:'notifications/initialized'}),signal:AbortSignal.timeout(15000)}).catch(()=>{});
+  const list=await rpc({jsonrpc:'2.0',id:2,method:'tools/list',params:{}},s);
+  if(init.msg?.error)throw new Error('initialize: '+init.msg.error.message);
+  return {protocol:init.msg?.result?.protocolVersion,server:init.msg?.result?.serverInfo,tools:(list.msg?.result?.tools||[]).map(t=>({name:t.name,description:(t.description||'').slice(0,160)}))};
+}
+export function flags(args){const o={_:[]};for(let i=0;i<args.length;i++){const a=args[i];if(a.startsWith('--')){const k=a.slice(2);if(k==='json'||k==='offline'||k==='live'||k==='all-modalities'){o[k==='all-modalities'?'allModalities':k]=true;}else if(k==='modality'||k==='modalities'){const v=args[++i];o.modality=o.modality||[];if(v!=null)o.modality.push(...modalityWant(v));}else o[k]=args[++i];}else o._.push(a);}return o;}
+const line=b=>`${b.status==='verified'?'✔':b.status==='reported-broken'?'✖':'·'} ${b.id}  [${b.kind}${b.works_count!=null?` +${b.works_count}/-${b.broken_count}`:''}]  ${b.endpoints[0].url||b.endpoints[0].command}`;
+export async function botsCommand(args,opts={}){
+  const out=opts.out||(s=>console.log(s));
+  const [sub='list',...rest]=args,o=flags(rest);
+  if(o.api){BASE=o.api.replace(/\/$/,'')+(/\/api\/deployable-bots$/.test(o.api)?'':'/api/deployable-bots');EXPLICIT=true;}
+  const limit=Number(o.limit||25),offset=Number(o.offset||0);
+  const print=(r,src)=>{if(o.json)return out(JSON.stringify({...r,source:src},null,2));out(`${r.matched} bots (${src})`);for(const b of r.items)out(line(b));if(r.matched>offset+r.items.length)out(`more: --offset ${offset+r.items.length}`);};
+  if(sub==='sync'){const r=await fetch(BASE+'/export',{signal:AbortSignal.timeout(60000)});if(!r.ok)throw new Error('Sync failed: HTTP '+r.status);
+    const {gzipSync}=await import('node:zlib');const text=await r.text();mkdirSync(cacheDir(),{recursive:true});writeFileSync(cacheFile(),gzipSync(text));out(`cached ${decode(gzipSync(text)).length} bots at ${cacheFile()}`);return;}
+  if(sub==='works'||sub==='broken'){const id=o._[0];if(!id)throw new Error(`Usage: kloudy bots ${sub} <id>`);
+    const r=await remote('/feedback',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({id,works:sub==='works'})});out(`thanks — recorded "${sub}" for ${r.id}`);return;}
+  if(sub==='probe'){const id=o._[0];if(!id)throw new Error('Usage: kloudy bots probe <id>');
+    let bot;try{bot=(await remote('/'+encodeURIComponent(id))).bot;}catch{const l=loadLocal();bot=l&&localSearch(l.bots.filter(b=>b.id===id)).items[0];}
+    if(!bot)throw new Error('Unknown bot id.');const ep=bot.endpoints[0];if(!ep.url)throw new Error('probe supports HTTP bots; local bots run with: '+ep.command);
+    const r=await mcpProbe(ep.url);if(o.json)return out(JSON.stringify(r,null,2));
+    out(`${bot.id} -> ${ep.url}\nserver: ${r.server?.name||'?'} ${r.server?.version||''} (protocol ${r.protocol||'?'})\ntools (${r.tools.length}): ${r.tools.map(t=>t.name).join(', ')}`);return;}
+  if(sub==='get'){const id=o._[0];if(!id)throw new Error('Usage: kloudy bots get <id>');
+    let bot=null, local=loadLocal();
+    if(!o.offline)try{bot=(await remote('/'+encodeURIComponent(id))).bot;}catch{}
+    if(!bot){const hit=local&&localSearch(local.bots.filter(b=>b.id===id)).items[0];if(!hit)throw new Error('Unknown bot id (offline). Run `kloudy bots sync`.');bot={...hit,meta:hit.meta||local.bots.find(b=>b.id===id)?.meta};}
+    const raw=local&&local.bots.find(b=>b.id===id);
+    if(raw){bot.meta=bot.meta||raw.meta;bot.targets=bot.targets||raw.targets;}
+    if(bot.kind==='hf'||raw?.kind==='hf'){
+      const full=raw?{...raw,...bot,meta:bot.meta||raw.meta,url:bot.source_url||bot.url||raw.url}:bot;
+      if(o.json)return out(JSON.stringify(bot,null,2));
+      return out(formatHfGet(full));
+    }
+    return out(JSON.stringify(bot,null,2));}
+  if(sub==='modalities'){
+    const l=loadLocal();
+    if(!l)throw new Error('No local catalog. Run `kloudy bots sync`.');
+    const counts=new Map();
+    let tagged=0,untagged=0;
+    for(const b of l.bots){
+      const mods=b.modalities||[];
+      if(!mods.length){untagged++;continue;}
+      tagged++;
+      for(const m of mods)counts.set(m,(counts.get(m)||0)+1);
+    }
+    const items=[...counts.entries()].sort((a,c)=>c[1]-a[1]||a[0].localeCompare(c[0])).map(([modality,count])=>({modality,count}));
+    if(o.json)return out(JSON.stringify({total:l.bots.length,tagged,untagged,items},null,2));
+    out(`${items.length} modalities across ${tagged} tagged bots`+(untagged?` (${untagged} untagged)`:''));
+    for(const it of items)out(`${it.count}\t${it.modality}`);
+    return;
+  }
+  if(sub!=='list'&&sub!=='search')throw new Error('Usage: kloudy bots list|search|get|sync|works|broken|modalities');
+  const q=sub==='search'?o._.join(' '):'';const query={q,status:o.status,kind:o.kind,device:o.device,modality:o.modality||o.modalities,allModalities:!!o.allModalities,limit,offset};
+  const l=loadLocal();
+  // Offline first: answer from bundled/cached data; the live API adds user-reported status when reachable and the cache is missing.
+  if(!o.offline&&(EXPLICIT||o.live))try{const p=new URLSearchParams(Object.entries({q,status:o.status,kind:o.kind,device:o.device,modality:Array.isArray(o.modality)?o.modality.join(','):o.modality||o.modalities,all_modalities:o.allModalities?'true':undefined,intent:o.intent,tier:o.tier,limit,offset}).filter(([,v])=>v!=null&&v!==''));return print(await remote('?'+p),'live: '+BASE);}catch(e){if(!l)throw e;}
+  if(l||o.offline){if(!l)throw new Error('No local catalog. Run `kloudy bots sync`.');return print(localSearch(l.bots,query),'local: '+l.source);}
+  const p=new URLSearchParams(Object.entries({q,status:o.status,kind:o.kind,device:o.device,modality:Array.isArray(o.modality)?o.modality.join(','):o.modality||o.modalities,all_modalities:o.allModalities?'true':undefined,intent:o.intent,tier:o.tier,limit,offset}).filter(([,v])=>v!=null&&v!==''));
+  return print(await remote('?'+p),'live');
+}

package/src/chooser-link.mjs

@@ -1,17 +1,17 @@
-// Public presentation adapter. URLs contain public template locators only, never
-// a connection credential, authorization token, goal text or identity claim.
-export const CHOOSER_URL='https://kloudy.ai/api/customer/visual-chooser/start';
-export const pendingChooserTool={name:'show_pending_chooser_link',description:'Show the pending Kloudy card and its HTTPS website fallback again. The website verifies account sign-in; the link is not authorization. This does not run a tool, model, installation or payment.',inputSchema:{type:'object',properties:{},additionalProperties:false},annotations:{readOnlyHint:true,destructiveHint:false,idempotentHint:true,openWorldHint:false}};
-export function chooserResponse(result,{apps=false,goal}={}){
- if(!result||typeof result!=='object'||Array.isArray(result)||result.isError)return result;
- const data=result.structuredContent;if(!data||typeof data!=='object'||Array.isArray(data))return result;
- const option=typeof data.selectedOptionId==='string'&&/^[a-z0-9-]{1,80}$/.test(data.selectedOptionId)?data.selectedOptionId:null;
- const set=typeof data.choiceSetId==='string'&&/^visual-[a-f0-9]{1,64}$/.test(data.choiceSetId)?data.choiceSetId:null;
- const url=option&&set?CHOOSER_URL+'#choice='+encodeURIComponent(option)+'&set='+encodeURIComponent(set):CHOOSER_URL;
- const chooser={url,linkIsAuthorization:false,identityFromEmail:false,accountBindingVerified:false,returnMethod:'existing-authenticated-website-project-manifest',automaticIdeReturnVerified:false,...(set?{publicChoiceSetId:set}:{}),...(option?{publicOptionId:option}:{}),...(goal?{request:goal}:{})};
- const text='Website chooser: '+url+'\nOpen this HTTPS link if your host does not show the card. Complete account sign-in/2FA on the website before opening private project choices. Email is a lookup hint, not proof. The host controls card rendering, clickable links and browser launch. Account-bound automatic return is not established by this public template locator.';
- return {...result,content:[...(Array.isArray(result.content)?result.content:[]),{type:'text',text}],structuredContent:{...data,chooser},...(apps?{_meta:{...result._meta,ui:{...result._meta?.ui,resourceUri:'ui://widget/kloudy-visual-setup-v1.html'}}}:{})};
-}
-export function pendingChooserResponse(pending){
- return pending?structuredClone(pending):{content:[{type:'text',text:'No pending chooser is retained in this MCP process. Open '+CHOOSER_URL+' and sign in to recover your existing project. This link is not a bearer token or authorization.'}],structuredContent:{pending:false,chooser:{url:CHOOSER_URL,linkIsAuthorization:false,accountBindingVerified:false}}};
-}
+// Public presentation adapter. URLs contain public template locators only, never
+// a connection credential, authorization token, goal text or identity claim.
+export const CHOOSER_URL='https://kloudy.ai/api/customer/visual-chooser/start';
+export const pendingChooserTool={name:'show_pending_chooser_link',description:'Show the pending Kloudy card and its HTTPS website fallback again. The website verifies account sign-in; the link is not authorization. This does not run a tool, model, installation or payment.',inputSchema:{type:'object',properties:{},additionalProperties:false},annotations:{readOnlyHint:true,destructiveHint:false,idempotentHint:true,openWorldHint:false}};
+export function chooserResponse(result,{apps=false,goal}={}){
+ if(!result||typeof result!=='object'||Array.isArray(result)||result.isError)return result;
+ const data=result.structuredContent;if(!data||typeof data!=='object'||Array.isArray(data))return result;
+ const option=typeof data.selectedOptionId==='string'&&/^[a-z0-9-]{1,80}$/.test(data.selectedOptionId)?data.selectedOptionId:null;
+ const set=typeof data.choiceSetId==='string'&&/^visual-[a-f0-9]{1,64}$/.test(data.choiceSetId)?data.choiceSetId:null;
+ const url=option&&set?CHOOSER_URL+'#choice='+encodeURIComponent(option)+'&set='+encodeURIComponent(set):CHOOSER_URL;
+ const chooser={url,linkIsAuthorization:false,identityFromEmail:false,accountBindingVerified:false,returnMethod:'existing-authenticated-website-project-manifest',automaticIdeReturnVerified:false,...(set?{publicChoiceSetId:set}:{}),...(option?{publicOptionId:option}:{}),...(goal?{request:goal}:{})};
+ const text='Website chooser: '+url+'\nOpen this HTTPS link if your host does not show the card. Complete account sign-in/2FA on the website before opening private project choices. Email is a lookup hint, not proof. The host controls card rendering, clickable links and browser launch. Account-bound automatic return is not established by this public template locator.';
+ return {...result,content:[...(Array.isArray(result.content)?result.content:[]),{type:'text',text}],structuredContent:{...data,chooser},...(apps?{_meta:{...result._meta,ui:{...result._meta?.ui,resourceUri:'ui://widget/kloudy-visual-setup-v1.html'}}}:{})};
+}
+export function pendingChooserResponse(pending){
+ return pending?structuredClone(pending):{content:[{type:'text',text:'No pending chooser is retained in this MCP process. Open '+CHOOSER_URL+' and sign in to recover your existing project. This link is not a bearer token or authorization.'}],structuredContent:{pending:false,chooser:{url:CHOOSER_URL,linkIsAuthorization:false,accountBindingVerified:false}}};
+}

package/src/client.mjs

@@ -1,96 +1,96 @@
-import {randomUUID} from 'node:crypto';
-
-export class KloudyError extends Error {
-  constructor(code,message){super(message);this.code=code;}
-}
-const fail=(code,message)=>{throw new KloudyError(code,message);};
-const object=x=>x&&typeof x==='object'&&!Array.isArray(x);
-const id=x=>{if(typeof x!=='string'||!/^[-\w]{1,128}$/.test(x))fail('invalid_id','Invalid engine identifier.');return encodeURIComponent(x);};
-const terminal=x=>['completed','failed','cancelled'].includes(x);
-export function httpTransport({origin,token,fetcher=fetch}){
-  const url=new URL(origin);
-  if(url.username||url.password||url.pathname!=='/'||url.search||url.hash||!(url.protocol==='https:'||(url.protocol==='http:'&&['127.0.0.1','localhost','[::1]'].includes(url.hostname))))fail('invalid_origin','Use an HTTPS or loopback engine origin.');
-  if(typeof token!=='string'||!token||/[\r\n]/.test(token))fail('registration_required','Ask for Kloudy and register before searching for tools.');
-  return async(method,path,body)=>{
-    let response;
-    try{response=await fetcher(url.origin+'/v1/integrations'+path,{method,redirect:'error',signal:AbortSignal.timeout(15000),headers:{authorization:'Bearer '+token,...(body?{'content-type':'application/json'}:{})},...(body?{body:JSON.stringify(body)}:{})});}
-    catch{fail('engine_unavailable','The engine is unavailable. No operation was retried.');}
-    if(!response.ok)fail([401,403].includes(response.status)?'registration_required':response.status===409?'stale_state':response.status===429?'rate_limited':'engine_unavailable','The engine did not accept this request. Reconnect, refresh or finish pending work before retrying.');
-    let size=0;const chunks=[];
-    for await(const chunk of response.body){size+=chunk.length;if(size>524288)fail('invalid_response','The engine response exceeded its limit.');chunks.push(chunk);}
-    try{return JSON.parse(Buffer.concat(chunks).toString());}catch{fail('invalid_response','Invalid engine response.');}
-  };
-}
-export function projectToolbox(receipt){
-  const n=receipt?.narrowing;
-  if(!object(n)||!Array.isArray(n.shortlist)||n.shortlist.length>3)fail('invalid_response','Expected a bounded engine shortlist.');
-  const box=n.toolbox,fn=box?.tool?.function;
-  let tools=[];
-  if(box?.status==='ready'){
-    if(!fn||typeof fn.name!=='string'||!/^[-\w.]{1,100}$/.test(fn.name)||typeof fn.description!=='string'||fn.description.length>2000||fn.parameters?.type!=='object'||!object(fn.parameters.properties)||!n.shortlist.some(x=>x.index===box.candidate_index)||n.measurements?.definitions_emitted!==1)fail('invalid_response','Expected exactly one authorized tool definition.');
-    const properties={};
-    for(const [name,field] of Object.entries(fn.parameters.properties)){
-      if(!/^\w{1,80}$/.test(name)||['__proto__','constructor','prototype'].includes(name)||field?.type!=='string')fail('unsupported_schema','This client supports the current engine string-input tools.');
-      properties[name]={type:'string'};
-      for(const key of ['minLength','maxLength'])if(field[key]!==undefined){if(!Number.isSafeInteger(field[key])||field[key]<0||field[key]>10000)fail('invalid_response','Invalid tool input bound.');properties[name][key]=field[key];}
-    }
-    if(Object.keys(properties).length>16)fail('invalid_response','Too many tool inputs.');
-    const required=fn.parameters.required??[];
-    if(!Array.isArray(required)||required.some(x=>!Object.hasOwn(properties,x)))fail('invalid_response','Invalid required inputs.');
-    tools=[{name:fn.name,description:fn.description,inputSchema:{type:'object',properties,required,additionalProperties:false}}];
-  }
-  return {status:tools.length?'ready':'empty',tools,reason:tools.length?'One engine-selected tool.':String(box?.reason||'no_match').slice(0,100),measurements:{candidatesRead:n.measurements?.candidates_read??null,definitionsEmitted:tools.length}};
-}
-export class KloudyClient {
-  constructor({transport,state={},save=async()=>{},mode='autonomous'}){if(typeof transport!=='function')fail('registration_required','Registration and a scoped engine connection are required.');if(!['autonomous','confirm'].includes(mode))fail('invalid_mode','Choose autonomous or confirm.');this.mode=mode;this.transport=transport;this.state=state;this.save=save;this.busy=false;}
-  async exclusive(work){if(this.busy)fail('busy','Wait for the current operation.');this.busy=true;try{return await work();}finally{this.busy=false;}}
-  async request(method,path,body,limit=4096){if(body&&Buffer.byteLength(JSON.stringify(body))>limit)fail('too_large','Request exceeds the engine limit.');return this.transport(method,path,body);}
-  async session(){
-    if(!this.state.sessionId){const opened=await this.request('POST','/sessions',{idempotency_key:randomUUID(),front_door:'kloudy'});id(opened.session_id);this.state.sessionId=opened.session_id;await this.save(this.state);}
-    let current=await this.request('GET','/sessions/'+id(this.state.sessionId));
-    if(current.state==='closed')fail('session_closed','This session is closed. Register or reconnect a fresh session.');
-    if(!Number.isSafeInteger(current.revision)||current.revision<0)fail('invalid_response','Invalid engine session revision.');
-    if(current.interaction_mode!==this.mode){
-      await this.request('POST',`/sessions/${id(this.state.sessionId)}/mode`,{idempotency_key:randomUUID(),expected_revision:current.revision,mode:this.mode,source:'typed'});
-      current=await this.request('GET','/sessions/'+id(this.state.sessionId));
-      if(current.interaction_mode!==this.mode||!Number.isSafeInteger(current.revision)||current.revision<0)fail('mode_not_supported','The engine has not acknowledged this surface’s approval mode. No tool was invoked.');
-    }
-    return current;
-  }
-  async ask(goal,{candidates=[],lane='non_medical'}={}){return this.exclusive(async()=>{
-    if(typeof goal!=='string'||!goal.trim()||[...goal].length>500||!['medical','non_medical'].includes(lane)||!Array.isArray(candidates)||candidates.length>16)fail('invalid_input','Use a goal of 1–500 characters and at most 16 public metadata candidates.');
-    const current=await this.session();
-    if(current.latest_request&&!terminal(current.latest_request.state))fail('pending_request','Finish or cancel the current action first.');
-    this.state.selection=null;await this.save(this.state);
-    if(!candidates.length){
-      const receipt=await this.request('POST',`/sessions/${id(this.state.sessionId)}/route`,{idempotency_key:randomUUID(),expected_revision:current.revision,query:goal,lane,compare:false,profile:null,url:null,language:'en'});
-      // An empty Toolbox never widens into a whole-server catalog.
-      const result={schema:'kloudy.toolbox/1',sessionId:this.state.sessionId,toolbox:{status:'empty',tools:[],reason:'discovery_feed_required'},fallback:{kind:'source_card',available:false}};
-      const destinations=receipt.routing?.view?.destinations;
-      if(Array.isArray(destinations)&&destinations[0]){const d=destinations[0];try{const url=new URL(d.url);if(url.protocol==='https:'&&!url.username&&!url.password)result.fallback={kind:'source_card',available:true,title:String(d.title||'Source').slice(0,200),url:url.href};}catch{}}
-      return result;
-    }
-    for(const c of candidates){if(!object(c)||Object.keys(c).some(k=>!['source_url','discovered_via','resource'].includes(k))||!['seo','geo'].includes(c.discovered_via)||!object(c.resource))fail('invalid_input','Use public KLDY/FHIR discovery metadata.');const u=new URL(c.source_url);if(u.protocol!=='https:'||u.username||u.password||u.search||u.hash)fail('invalid_input','Metadata sources must be credential-free HTTPS identifiers.');}
-    const key=randomUUID();
-    const receipt=await this.request('POST',`/sessions/${id(this.state.sessionId)}/narrow`,{idempotency_key:key,expected_revision:current.revision,goal,lane,candidates},65536);
-    const toolbox=projectToolbox(receipt);
-    this.state.selection=toolbox.tools.length?{key,tool:toolbox.tools[0]}:null;await this.save(this.state);
-    return {schema:'kloudy.toolbox/1',sessionId:this.state.sessionId,toolbox};
-  });}
-  async call(name,inputs){return this.exclusive(async()=>{
-    const selected=this.state.selection;if(!selected||selected.tool.name!==name)fail('not_selected','Ask for Kloudy to select this tool first.');
-    const schema=selected.tool.inputSchema;if(!object(inputs)||Object.keys(inputs).some(k=>!Object.hasOwn(schema.properties,k))||schema.required.some(k=>!Object.hasOwn(inputs,k)))fail('invalid_input','Use only the selected tool inputs.');
-    for(const [k,v] of Object.entries(inputs)){const f=schema.properties[k];if(typeof v!=='string'||[...v].length<(f.minLength||0)||[...v].length>(f.maxLength??10000))fail('invalid_input','Invalid tool input.');}
-    const current=await this.session();if(current.latest_request&&!terminal(current.latest_request.state))fail('pending_request','Finish the pending action first.');
-    const receipt=await this.request('POST',`/sessions/${id(this.state.sessionId)}/escalate`,{idempotency_key:randomUUID(),expected_revision:current.revision,narrowing_key:selected.key,inputs});
-    id(receipt.request_id);this.state.requestId=receipt.request_id;this.state.selection=null;await this.save(this.state);return this.status();
-  });}
-  async status(){if(!this.state.requestId)return {state:'idle',mode:this.mode,sessionId:this.state.sessionId||null};const receipt=await this.request('GET','/requests/'+id(this.state.requestId));return {...receipt,...(this.mode==='autonomous'&&receipt.state==='awaiting_approval'?{mode:'autonomous',blocked:{code:'engine_autonomy_not_supported',message:'The engine still requires a separate approval for this action. No approval was fabricated. Cancel or check the engine deployment.'}}:{})};}
-  async decide(decision,revision){return this.exclusive(async()=>{
-    if(!this.state.requestId)fail('no_request','No action is pending in this session.');
-    if(decision==='approve'){if(this.mode!=='confirm')fail('autonomous_only','This client does not offer a second approval gate.');if(typeof revision!=='string'||!revision||revision.length>256)fail('approval_required','Read the exact action and supply its approval revision.');await this.request('POST',`/requests/${id(this.state.requestId)}/approve`,{revision,decision:'approve'});}
-    else if(decision==='cancel')await this.request('POST',`/requests/${id(this.state.requestId)}/cancel`,{});
-    else fail('invalid_input','Choose approve or cancel.');
-    return this.status();
-  });}
-}
+import {randomUUID} from 'node:crypto';
+
+export class KloudyError extends Error {
+  constructor(code,message){super(message);this.code=code;}
+}
+const fail=(code,message)=>{throw new KloudyError(code,message);};
+const object=x=>x&&typeof x==='object'&&!Array.isArray(x);
+const id=x=>{if(typeof x!=='string'||!/^[-\w]{1,128}$/.test(x))fail('invalid_id','Invalid engine identifier.');return encodeURIComponent(x);};
+const terminal=x=>['completed','failed','cancelled'].includes(x);
+export function httpTransport({origin,token,fetcher=fetch}){
+  const url=new URL(origin);
+  if(url.username||url.password||url.pathname!=='/'||url.search||url.hash||!(url.protocol==='https:'||(url.protocol==='http:'&&['127.0.0.1','localhost','[::1]'].includes(url.hostname))))fail('invalid_origin','Use an HTTPS or loopback engine origin.');
+  if(typeof token!=='string'||!token||/[\r\n]/.test(token))fail('registration_required','Ask for Kloudy and register before searching for tools.');
+  return async(method,path,body)=>{
+    let response;
+    try{response=await fetcher(url.origin+'/v1/integrations'+path,{method,redirect:'error',signal:AbortSignal.timeout(15000),headers:{authorization:'Bearer '+token,...(body?{'content-type':'application/json'}:{})},...(body?{body:JSON.stringify(body)}:{})});}
+    catch{fail('engine_unavailable','The engine is unavailable. No operation was retried.');}
+    if(!response.ok)fail([401,403].includes(response.status)?'registration_required':response.status===409?'stale_state':response.status===429?'rate_limited':'engine_unavailable','The engine did not accept this request. Reconnect, refresh or finish pending work before retrying.');
+    let size=0;const chunks=[];
+    for await(const chunk of response.body){size+=chunk.length;if(size>524288)fail('invalid_response','The engine response exceeded its limit.');chunks.push(chunk);}
+    try{return JSON.parse(Buffer.concat(chunks).toString());}catch{fail('invalid_response','Invalid engine response.');}
+  };
+}
+export function projectToolbox(receipt){
+  const n=receipt?.narrowing;
+  if(!object(n)||!Array.isArray(n.shortlist)||n.shortlist.length>3)fail('invalid_response','Expected a bounded engine shortlist.');
+  const box=n.toolbox,fn=box?.tool?.function;
+  let tools=[];
+  if(box?.status==='ready'){
+    if(!fn||typeof fn.name!=='string'||!/^[-\w.]{1,100}$/.test(fn.name)||typeof fn.description!=='string'||fn.description.length>2000||fn.parameters?.type!=='object'||!object(fn.parameters.properties)||!n.shortlist.some(x=>x.index===box.candidate_index)||n.measurements?.definitions_emitted!==1)fail('invalid_response','Expected exactly one authorized tool definition.');
+    const properties={};
+    for(const [name,field] of Object.entries(fn.parameters.properties)){
+      if(!/^\w{1,80}$/.test(name)||['__proto__','constructor','prototype'].includes(name)||field?.type!=='string')fail('unsupported_schema','This client supports the current engine string-input tools.');
+      properties[name]={type:'string'};
+      for(const key of ['minLength','maxLength'])if(field[key]!==undefined){if(!Number.isSafeInteger(field[key])||field[key]<0||field[key]>10000)fail('invalid_response','Invalid tool input bound.');properties[name][key]=field[key];}
+    }
+    if(Object.keys(properties).length>16)fail('invalid_response','Too many tool inputs.');
+    const required=fn.parameters.required??[];
+    if(!Array.isArray(required)||required.some(x=>!Object.hasOwn(properties,x)))fail('invalid_response','Invalid required inputs.');
+    tools=[{name:fn.name,description:fn.description,inputSchema:{type:'object',properties,required,additionalProperties:false}}];
+  }
+  return {status:tools.length?'ready':'empty',tools,reason:tools.length?'One engine-selected tool.':String(box?.reason||'no_match').slice(0,100),measurements:{candidatesRead:n.measurements?.candidates_read??null,definitionsEmitted:tools.length}};
+}
+export class KloudyClient {
+  constructor({transport,state={},save=async()=>{},mode='autonomous'}){if(typeof transport!=='function')fail('registration_required','Registration and a scoped engine connection are required.');if(!['autonomous','confirm'].includes(mode))fail('invalid_mode','Choose autonomous or confirm.');this.mode=mode;this.transport=transport;this.state=state;this.save=save;this.busy=false;}
+  async exclusive(work){if(this.busy)fail('busy','Wait for the current operation.');this.busy=true;try{return await work();}finally{this.busy=false;}}
+  async request(method,path,body,limit=4096){if(body&&Buffer.byteLength(JSON.stringify(body))>limit)fail('too_large','Request exceeds the engine limit.');return this.transport(method,path,body);}
+  async session(){
+    if(!this.state.sessionId){const opened=await this.request('POST','/sessions',{idempotency_key:randomUUID(),front_door:'kloudy'});id(opened.session_id);this.state.sessionId=opened.session_id;await this.save(this.state);}
+    let current=await this.request('GET','/sessions/'+id(this.state.sessionId));
+    if(current.state==='closed')fail('session_closed','This session is closed. Register or reconnect a fresh session.');
+    if(!Number.isSafeInteger(current.revision)||current.revision<0)fail('invalid_response','Invalid engine session revision.');
+    if(current.interaction_mode!==this.mode){
+      await this.request('POST',`/sessions/${id(this.state.sessionId)}/mode`,{idempotency_key:randomUUID(),expected_revision:current.revision,mode:this.mode,source:'typed'});
+      current=await this.request('GET','/sessions/'+id(this.state.sessionId));
+      if(current.interaction_mode!==this.mode||!Number.isSafeInteger(current.revision)||current.revision<0)fail('mode_not_supported','The engine has not acknowledged this surface’s approval mode. No tool was invoked.');
+    }
+    return current;
+  }
+  async ask(goal,{candidates=[],lane='non_medical'}={}){return this.exclusive(async()=>{
+    if(typeof goal!=='string'||!goal.trim()||[...goal].length>500||!['medical','non_medical'].includes(lane)||!Array.isArray(candidates)||candidates.length>16)fail('invalid_input','Use a goal of 1–500 characters and at most 16 public metadata candidates.');
+    const current=await this.session();
+    if(current.latest_request&&!terminal(current.latest_request.state))fail('pending_request','Finish or cancel the current action first.');
+    this.state.selection=null;await this.save(this.state);
+    if(!candidates.length){
+      const receipt=await this.request('POST',`/sessions/${id(this.state.sessionId)}/route`,{idempotency_key:randomUUID(),expected_revision:current.revision,query:goal,lane,compare:false,profile:null,url:null,language:'en'});
+      // An empty Toolbox never widens into a whole-server catalog.
+      const result={schema:'kloudy.toolbox/1',sessionId:this.state.sessionId,toolbox:{status:'empty',tools:[],reason:'discovery_feed_required'},fallback:{kind:'source_card',available:false}};
+      const destinations=receipt.routing?.view?.destinations;
+      if(Array.isArray(destinations)&&destinations[0]){const d=destinations[0];try{const url=new URL(d.url);if(url.protocol==='https:'&&!url.username&&!url.password)result.fallback={kind:'source_card',available:true,title:String(d.title||'Source').slice(0,200),url:url.href};}catch{}}
+      return result;
+    }
+    for(const c of candidates){if(!object(c)||Object.keys(c).some(k=>!['source_url','discovered_via','resource'].includes(k))||!['seo','geo'].includes(c.discovered_via)||!object(c.resource))fail('invalid_input','Use public KLDY/FHIR discovery metadata.');const u=new URL(c.source_url);if(u.protocol!=='https:'||u.username||u.password||u.search||u.hash)fail('invalid_input','Metadata sources must be credential-free HTTPS identifiers.');}
+    const key=randomUUID();
+    const receipt=await this.request('POST',`/sessions/${id(this.state.sessionId)}/narrow`,{idempotency_key:key,expected_revision:current.revision,goal,lane,candidates},65536);
+    const toolbox=projectToolbox(receipt);
+    this.state.selection=toolbox.tools.length?{key,tool:toolbox.tools[0]}:null;await this.save(this.state);
+    return {schema:'kloudy.toolbox/1',sessionId:this.state.sessionId,toolbox};
+  });}
+  async call(name,inputs){return this.exclusive(async()=>{
+    const selected=this.state.selection;if(!selected||selected.tool.name!==name)fail('not_selected','Ask for Kloudy to select this tool first.');
+    const schema=selected.tool.inputSchema;if(!object(inputs)||Object.keys(inputs).some(k=>!Object.hasOwn(schema.properties,k))||schema.required.some(k=>!Object.hasOwn(inputs,k)))fail('invalid_input','Use only the selected tool inputs.');
+    for(const [k,v] of Object.entries(inputs)){const f=schema.properties[k];if(typeof v!=='string'||[...v].length<(f.minLength||0)||[...v].length>(f.maxLength??10000))fail('invalid_input','Invalid tool input.');}
+    const current=await this.session();if(current.latest_request&&!terminal(current.latest_request.state))fail('pending_request','Finish the pending action first.');
+    const receipt=await this.request('POST',`/sessions/${id(this.state.sessionId)}/escalate`,{idempotency_key:randomUUID(),expected_revision:current.revision,narrowing_key:selected.key,inputs});
+    id(receipt.request_id);this.state.requestId=receipt.request_id;this.state.selection=null;await this.save(this.state);return this.status();
+  });}
+  async status(){if(!this.state.requestId)return {state:'idle',mode:this.mode,sessionId:this.state.sessionId||null};const receipt=await this.request('GET','/requests/'+id(this.state.requestId));return {...receipt,...(this.mode==='autonomous'&&receipt.state==='awaiting_approval'?{mode:'autonomous',blocked:{code:'engine_autonomy_not_supported',message:'The engine still requires a separate approval for this action. No approval was fabricated. Cancel or check the engine deployment.'}}:{})};}
+  async decide(decision,revision){return this.exclusive(async()=>{
+    if(!this.state.requestId)fail('no_request','No action is pending in this session.');
+    if(decision==='approve'){if(this.mode!=='confirm')fail('autonomous_only','This client does not offer a second approval gate.');if(typeof revision!=='string'||!revision||revision.length>256)fail('approval_required','Read the exact action and supply its approval revision.');await this.request('POST',`/requests/${id(this.state.requestId)}/approve`,{revision,decision:'approve'});}
+    else if(decision==='cancel')await this.request('POST',`/requests/${id(this.state.requestId)}/cancel`,{});
+    else fail('invalid_input','Choose approve or cancel.');
+    return this.status();
+  });}
+}

package/src/connect-card.mjs

@@ -1,32 +1,32 @@
-import {connectHTML,publicConnectHTML} from './connect-ui.mjs';
-
-export const CONNECT_URI='ui://widget/kloudy-connect-v1.html';
-export const connectResource={uri:CONNECT_URI,name:'Kloudy setup',description:'Show the Kloudy install step or sign-in availability.',mimeType:'text/html;profile=mcp-app'};
-export const connectTool={
- name:'kloudy_connect_card',
- title:'Kloudy sign-in and install card',
- description:'Show sign-in availability or the one-step install card. First call find_mcp_tools with operation ask and a short setup request. If it returns kind account or connect, call this card once with the returned mode. Copying the command does not install anything or authorize private tools. Text-only hosts show the same instruction.',
- annotations:{readOnlyHint:true,destructiveHint:false,idempotentHint:true,openWorldHint:false},
- inputSchema:{type:'object',properties:{mode:{type:'string',enum:['signin','install'],description:'Use the mode returned by find_mcp_tools: signin for account sign-in, or install for editor setup.'}},required:['mode'],additionalProperties:false},
- _meta:{ui:{resourceUri:CONNECT_URI},'openai/outputTemplate':CONNECT_URI,'openai/toolInvocation/invoking':'Opening Kloudy setup…','openai/toolInvocation/invoked':'Kloudy setup'}
-};
-export function connectArguments(value){return !!value&&typeof value==='object'&&!Array.isArray(value)&&Object.keys(value).length===1&&['signin','install'].includes(value.mode);}
-export function connectResult(mode,{publicOnly=false}={}){
- const install=mode==='install';
- const message=install?'Choose Connect, then pick your app.':'GitHub sign-in coming soon. Find public tools today.';
- const actions=[install?{label:'Connect',url:'https://kloudy.ai/install'}:{label:'Find tools',url:'https://kloudy.ai/install#discover'}];
- return {content:[{type:'text',text:message+'\n\n'+actions.map(a=>`[${a.label}](${a.url})`).join('\n')}],structuredContent:{tier:'public',kind:install?'connect':'account',mode,items:[],message,...(install?{copyText:'npx kloudy'}:{}),actions,model_calls:0,executed:false}};
-}
-export function connectContents({publicOnly=false}={}){return {contents:[{uri:CONNECT_URI,mimeType:connectResource.mimeType,text:publicOnly?publicConnectHTML:connectHTML,_meta:{
- ui:{prefersBorder:true,domain:'https://kloudy.ai',csp:{connectDomains:[],resourceDomains:[]}},
- 'openai/widgetDescription':'Kloudy sign-in and setup choices. No account is created and no tool is authorized by opening a link.',
- 'openai/widgetPrefersBorder':true,'openai/widgetDomain':'https://kloudy.ai',
- 'openai/widgetCSP':{connect_domains:[],resource_domains:[],redirect_domains:['https://kloudy.ai','https://cursor.com','https://code.visualstudio.com','https://windsurf.com','https://devin.ai','https://claude.com','https://claude.ai','https://chatgpt.com']}
- }}]};}
-// Public UI metadata still requires credential validation when called with a credential.
-export function connectMessage(method,params={}){
- if(!params||typeof params!=='object'||Array.isArray(params))return false;
- if(['resources/list','resources/templates/list'].includes(method))return Object.keys(params).length===0;
- if(method==='resources/read')return Object.keys(params).length===1&&params.uri===CONNECT_URI;
- return method==='tools/call'&&Object.keys(params).length===2&&params.name==='kloudy_connect_card'&&connectArguments(params.arguments);
-}
+import {connectHTML,publicConnectHTML} from './connect-ui.mjs';
+
+export const CONNECT_URI='ui://widget/kloudy-connect-v1.html';
+export const connectResource={uri:CONNECT_URI,name:'Kloudy setup',description:'Show the Kloudy install step or sign-in availability.',mimeType:'text/html;profile=mcp-app'};
+export const connectTool={
+ name:'kloudy_connect_card',
+ title:'Kloudy sign-in and install card',
+ description:'Show sign-in availability or the one-step install card. First call find_mcp_tools with operation ask and a short setup request. If it returns kind account or connect, call this card once with the returned mode. Copying the command does not install anything or authorize private tools. Text-only hosts show the same instruction.',
+ annotations:{readOnlyHint:true,destructiveHint:false,idempotentHint:true,openWorldHint:false},
+ inputSchema:{type:'object',properties:{mode:{type:'string',enum:['signin','install'],description:'Use the mode returned by find_mcp_tools: signin for account sign-in, or install for editor setup.'}},required:['mode'],additionalProperties:false},
+ _meta:{ui:{resourceUri:CONNECT_URI},'openai/outputTemplate':CONNECT_URI,'openai/toolInvocation/invoking':'Opening Kloudy setup…','openai/toolInvocation/invoked':'Kloudy setup'}
+};
+export function connectArguments(value){return !!value&&typeof value==='object'&&!Array.isArray(value)&&Object.keys(value).length===1&&['signin','install'].includes(value.mode);}
+export function connectResult(mode,{publicOnly=false}={}){
+ const install=mode==='install';
+ const message=install?'Choose Connect, then pick your app.':'GitHub sign-in coming soon. Find public tools today.';
+ const actions=[install?{label:'Connect',url:'https://kloudy.ai/install'}:{label:'Find tools',url:'https://kloudy.ai/install#discover'}];
+ return {content:[{type:'text',text:message+'\n\n'+actions.map(a=>`[${a.label}](${a.url})`).join('\n')}],structuredContent:{tier:'public',kind:install?'connect':'account',mode,items:[],message,...(install?{copyText:'npx kloudy'}:{}),actions,model_calls:0,executed:false}};
+}
+export function connectContents({publicOnly=false}={}){return {contents:[{uri:CONNECT_URI,mimeType:connectResource.mimeType,text:publicOnly?publicConnectHTML:connectHTML,_meta:{
+ ui:{prefersBorder:true,domain:'https://kloudy.ai',csp:{connectDomains:[],resourceDomains:[]}},
+ 'openai/widgetDescription':'Kloudy sign-in and setup choices. No account is created and no tool is authorized by opening a link.',
+ 'openai/widgetPrefersBorder':true,'openai/widgetDomain':'https://kloudy.ai',
+ 'openai/widgetCSP':{connect_domains:[],resource_domains:[],redirect_domains:['https://kloudy.ai','https://cursor.com','https://code.visualstudio.com','https://windsurf.com','https://devin.ai','https://claude.com','https://claude.ai','https://chatgpt.com']}
+ }}]};}
+// Public UI metadata still requires credential validation when called with a credential.
+export function connectMessage(method,params={}){
+ if(!params||typeof params!=='object'||Array.isArray(params))return false;
+ if(['resources/list','resources/templates/list'].includes(method))return Object.keys(params).length===0;
+ if(method==='resources/read')return Object.keys(params).length===1&&params.uri===CONNECT_URI;
+ return method==='tools/call'&&Object.keys(params).length===2&&params.name==='kloudy_connect_card'&&connectArguments(params.arguments);
+}