kloudy 0.4.8 → 1.0.0

package/src/sdf-budget.mjs

@@ -1,23 +1,23 @@
-import {Tiktoken} from 'js-tiktoken/lite';
-import ranks from 'js-tiktoken/ranks/cl100k_base';
-// A reproducible local reference encoding, not a claim about every model.
-const tokenizer=new Tiktoken(ranks);
-export const sdfTokens=card=>tokenizer.encode(JSON.stringify(card),[],[]).length;
-export function compactSDF(card){
- const ext=card.extensions['x-kloudy'];
- ext.tokenizer='cl100k_base';ext.token_limit=750;
- while(sdfTokens(card)>750){
-  ext.truncated=true;
-  if(card.links.length){card.links.pop();continue;}
-  if(card.sections.length>1){card.sections.pop();continue;}
-  if(card.summary.key_points.length){card.summary.key_points.pop();continue;}
-  const section=card.sections[0];
-  if(section.summary.length>80){section.summary=shorter(section.summary);continue;}
-  if(card.summary.brief.length>80){card.summary.brief=shorter(card.summary.brief);continue;}
-  if(card.source.title.length>40){const title=shorter(card.source.title);card.source.title=title;card.metadata.title=title;card.type_data.headline=title;continue;}
-  if(section.title.length>40){section.title=shorter(section.title);continue;}
-  throw Error('Source attribution cannot fit the 750-token compact card. Use standard resolution.');
- }
- return card;
-}
-function shorter(text){const cut=Array.from(text).slice(0,Math.floor(Array.from(text).length*.75)).join('');return cut.replace(/\s+\S*$/,'')+'…';}
+import {Tiktoken} from 'js-tiktoken/lite';
+import ranks from 'js-tiktoken/ranks/cl100k_base';
+// A reproducible local reference encoding, not a claim about every model.
+const tokenizer=new Tiktoken(ranks);
+export const sdfTokens=card=>tokenizer.encode(JSON.stringify(card),[],[]).length;
+export function compactSDF(card){
+ const ext=card.extensions['x-kloudy'];
+ ext.tokenizer='cl100k_base';ext.token_limit=750;
+ while(sdfTokens(card)>750){
+  ext.truncated=true;
+  if(card.links.length){card.links.pop();continue;}
+  if(card.sections.length>1){card.sections.pop();continue;}
+  if(card.summary.key_points.length){card.summary.key_points.pop();continue;}
+  const section=card.sections[0];
+  if(section.summary.length>80){section.summary=shorter(section.summary);continue;}
+  if(card.summary.brief.length>80){card.summary.brief=shorter(card.summary.brief);continue;}
+  if(card.source.title.length>40){const title=shorter(card.source.title);card.source.title=title;card.metadata.title=title;card.type_data.headline=title;continue;}
+  if(section.title.length>40){section.title=shorter(section.title);continue;}
+  throw Error('Source attribution cannot fit the 750-token compact card. Use standard resolution.');
+ }
+ return card;
+}
+function shorter(text){const cut=Array.from(text).slice(0,Math.floor(Array.from(text).length*.75)).join('');return cut.replace(/\s+\S*$/,'')+'…';}

package/src/sdf.mjs

@@ -1,12 +1,12 @@
-import Ajv from 'ajv/dist/2020.js';
-import addFormats from 'ajv-formats';
-import root from '../schemas/sdf-document-0.2.schema.json' with {type:'json'};
-import profile from '../schemas/sdf-webpage-v1.schema.json' with {type:'json'};
-const ajv=new Ajv({strict:false,allErrors:false});addFormats(ajv);ajv.addSchema(root);
-const validate=ajv.compile(profile);
-export function validateSDF(card){
- if(!validate(card))return {valid:false,error:'The card does not match the pinned SDF webpage schema.'};
- for(const value of [card.source.url,...card.links.map(l=>l.href)]){let url;try{url=new URL(value);}catch{return {valid:false,error:'Invalid source or link.'};}if(!['https:','http:'].includes(url.protocol)||url.username||url.password)return {valid:false,error:'Unsafe source or link.'};}
- if(!/^[0-9a-f]{64}$/.test(card.provenance.content_hash.slice(7)))return {valid:false,error:'Missing content hash.'};
- return {valid:true,profile:'kloudy.sdf.webpage/1',upstream:'sdfprotocol/sdf@e4619ad0b951ced8542692c6b624cb86794cb863'};
-}
+import Ajv from 'ajv/dist/2020.js';
+import addFormats from 'ajv-formats';
+import root from '../schemas/sdf-document-0.2.schema.json' with {type:'json'};
+import profile from '../schemas/sdf-webpage-v1.schema.json' with {type:'json'};
+const ajv=new Ajv({strict:false,allErrors:false});addFormats(ajv);ajv.addSchema(root);
+const validate=ajv.compile(profile);
+export function validateSDF(card){
+ if(!validate(card))return {valid:false,error:'The card does not match the pinned SDF webpage schema.'};
+ for(const value of [card.source.url,...card.links.map(l=>l.href)]){let url;try{url=new URL(value);}catch{return {valid:false,error:'Invalid source or link.'};}if(!['https:','http:'].includes(url.protocol)||url.username||url.password)return {valid:false,error:'Unsafe source or link.'};}
+ if(!/^[0-9a-f]{64}$/.test(card.provenance.content_hash.slice(7)))return {valid:false,error:'Missing content hash.'};
+ return {valid:true,profile:'kloudy.sdf.webpage/1',upstream:'sdfprotocol/sdf@e4619ad0b951ced8542692c6b624cb86794cb863'};
+}

package/src/starter.mjs

@@ -1,43 +1,43 @@
-import {mkdir,writeFile} from 'node:fs/promises';
-import {resolve,join} from 'node:path';
-import {KloudyError} from './client.mjs';
-export const starterFiles={
- 'kloudy.json':JSON.stringify({version:'kloudy.project/1',deploymentTarget:'bww',html:'provider-opt-in',publication:'requires-authorized-hosting'},null,2)+'\n',
- 'package.json':JSON.stringify({name:'my-kloudy-app',version:'1.0.0',private:true,type:'module',engines:{node:'>=20.19.0'},scripts:{start:'node app.mjs',card:'node card.mjs',toolbox:'node toolbox.mjs'},dependencies:{'kloudy':'latest'}},null,2)+'\n',
- 'app.mjs':`import {readPublicPage} from 'kloudy/public';
-try {
- const page=await readPublicPage(process.argv[2]||'https://example.com');
- console.log(JSON.stringify({...page,body:page.body.slice(0,6000)},null,2));
-} catch(error) { console.error(error.code+': '+error.message);process.exitCode=1; }
-`,
- 'card.mjs':`import {readCard} from 'kloudy/public';
-try { console.log(JSON.stringify(await readCard(process.argv[2]||'/world'),null,2)); }
-catch(error) { console.error(error.code+': '+error.message);process.exitCode=1; }
-`,
- 'toolbox.mjs':`import {withConnection} from 'kloudy/session';
-// The native host/operator provides the existing scoped connection outside this project.
-// This selects definitions only. It never calls a tool automatically.
-try { const selected=await withConnection(process.env.KLOUDY_CONNECTION,client=>client.ask(process.argv[2]||'Find a tool to read my notes'));console.log(JSON.stringify(selected.toolbox,null,2)); }
-catch(error) { console.error(error.code+': '+error.message);process.exitCode=1; }
-`,
- '.gitignore':'node_modules/\n.env\n.env.*\n*connection*.json\n*session*.json\n',
- 'README.md':`# Build with Kloudy
-
-The default deployment target is the Bot Wide Web. kloudy.json records that choice; creating a starter does not publish anything or authorize hosting charges. HTML fragments are optional and controlled by the provider.\n\nNode.js 20+. Run npm install, then npm start. This reads https://example.com through Kloudy's public reader and prints source-attributed content. No account or model call is needed. Provider restrictions and shared rate limits apply.
-
-- npm start -- https://example.com: read a public page; source HTML is data, never executed.
-- npm run card -- /world: fetch the same bounded information card bots see.
-- npm run toolbox: select a toolbox with an existing scoped connection. Keep KLOUDY_CONNECTION pointing to its private file outside this project. Missing/expired connections fail explicitly. This example never executes the selected tool.
-
-Use npx -y kloudy@latest to attach the one MCP door to a supported IDE. Customer self-registration and permanent GlassBreak grants are not yet available. Do not place tokens in browser code, Git, screenshots or prompts. A catalog listing is not an executable provider integration.
-
-The CLI, MCP and SDK share the engine's authorization boundary. https://kloudy.ai/build documents current availability and the next steps. The downloaded public adapter is Apache-2.0; it contains no private engine or vault implementation.
-`
-};
-export async function createStarter(directory){
- if(typeof directory!=='string'||!directory.trim())throw new KloudyError('invalid_directory','Choose a new starter directory.');
- const target=resolve(directory);
- try{await mkdir(target,{mode:0o700});}catch(error){throw new KloudyError(error.code==='EEXIST'?'directory_exists':'directory_unavailable','Choose a new directory inside an existing parent. Existing files were not overwritten.');}
- for(const [name,content] of Object.entries(starterFiles))await writeFile(join(target,name),content,{flag:'wx',mode:0o600});
- return {status:'created',directory:target,files:Object.keys(starterFiles),next:['npm install','npm start','npm run card'],accountRequired:false,toolExecution:'Requires an existing scoped connection; never automatic in this starter.'};
-}
+import {mkdir,writeFile} from 'node:fs/promises';
+import {resolve,join} from 'node:path';
+import {KloudyError} from './client.mjs';
+export const starterFiles={
+ 'kloudy.json':JSON.stringify({version:'kloudy.project/1',deploymentTarget:'bww',html:'provider-opt-in',publication:'requires-authorized-hosting'},null,2)+'\n',
+ 'package.json':JSON.stringify({name:'my-kloudy-app',version:'1.0.0',private:true,type:'module',engines:{node:'>=20.19.0'},scripts:{start:'node app.mjs',card:'node card.mjs',toolbox:'node toolbox.mjs'},dependencies:{'kloudy':'latest'}},null,2)+'\n',
+ 'app.mjs':`import {readPublicPage} from 'kloudy/public';
+try {
+ const page=await readPublicPage(process.argv[2]||'https://example.com');
+ console.log(JSON.stringify({...page,body:page.body.slice(0,6000)},null,2));
+} catch(error) { console.error(error.code+': '+error.message);process.exitCode=1; }
+`,
+ 'card.mjs':`import {readCard} from 'kloudy/public';
+try { console.log(JSON.stringify(await readCard(process.argv[2]||'/world'),null,2)); }
+catch(error) { console.error(error.code+': '+error.message);process.exitCode=1; }
+`,
+ 'toolbox.mjs':`import {withConnection} from 'kloudy/session';
+// The native host/operator provides the existing scoped connection outside this project.
+// This selects definitions only. It never calls a tool automatically.
+try { const selected=await withConnection(process.env.KLOUDY_CONNECTION,client=>client.ask(process.argv[2]||'Find a tool to read my notes'));console.log(JSON.stringify(selected.toolbox,null,2)); }
+catch(error) { console.error(error.code+': '+error.message);process.exitCode=1; }
+`,
+ '.gitignore':'node_modules/\n.env\n.env.*\n*connection*.json\n*session*.json\n',
+ 'README.md':`# Build with Kloudy
+
+The default deployment target is the Bot Wide Web. kloudy.json records that choice; creating a starter does not publish anything or authorize hosting charges. HTML fragments are optional and controlled by the provider.\n\nNode.js 20+. Run npm install, then npm start. This reads https://example.com through Kloudy's public reader and prints source-attributed content. No account or model call is needed. Provider restrictions and shared rate limits apply.
+
+- npm start -- https://example.com: read a public page; source HTML is data, never executed.
+- npm run card -- /world: fetch the same bounded information card bots see.
+- npm run toolbox: select a toolbox with an existing scoped connection. Keep KLOUDY_CONNECTION pointing to its private file outside this project. Missing/expired connections fail explicitly. This example never executes the selected tool.
+
+Use npx -y kloudy@latest to attach the one MCP door to a supported IDE. Customer self-registration and permanent GlassBreak grants are not yet available. Do not place tokens in browser code, Git, screenshots or prompts. A catalog listing is not an executable provider integration.
+
+The CLI, MCP and SDK share the engine's authorization boundary. https://kloudy.ai/build documents current availability and the next steps. The downloaded public adapter is Apache-2.0; it contains no private engine or vault implementation.
+`
+};
+export async function createStarter(directory){
+ if(typeof directory!=='string'||!directory.trim())throw new KloudyError('invalid_directory','Choose a new starter directory.');
+ const target=resolve(directory);
+ try{await mkdir(target,{mode:0o700});}catch(error){throw new KloudyError(error.code==='EEXIST'?'directory_exists':'directory_unavailable','Choose a new directory inside an existing parent. Existing files were not overwritten.');}
+ for(const [name,content] of Object.entries(starterFiles))await writeFile(join(target,name),content,{flag:'wx',mode:0o600});
+ return {status:'created',directory:target,files:Object.keys(starterFiles),next:['npm install','npm start','npm run card'],accountRequired:false,toolExecution:'Requires an existing scoped connection; never automatic in this starter.'};
+}

package/src/status-indicator.css

@@ -1,5 +1,5 @@
-.kloudy-indicator{display:inline-flex;align-items:center;justify-content:center;flex-direction:column;gap:2px;min-width:40px;min-height:40px;font:10px/1 system-ui;color:inherit}
-.kloudy-indicator-orb{position:relative;display:block;width:22px;height:22px;border-radius:50%;background:radial-gradient(circle at 35% 25%,#b477ff,#5c21b9 62%,#bd8ff6 68%,#431180 78%);box-shadow:0 0 5px #a574e6}
-.kloudy-indicator-orb:before,.kloudy-indicator-orb:after{content:'';position:absolute;top:45%;width:3px;height:3px;border-radius:50%;background:#d0ffff;box-shadow:0 0 4px #68dcff}.kloudy-indicator-orb:before{left:27%}.kloudy-indicator-orb:after{right:27%}
-@keyframes kloudy-status-idle{50%{filter:brightness(1.2);transform:translateX(.3px)}}@keyframes kloudy-status-think{50%{transform:scale(.25);filter:brightness(1.7)}}
-@media(prefers-reduced-motion:no-preference){.kloudy-indicator-orb{animation:kloudy-status-idle 3.6s ease-in-out infinite}.kloudy-indicator[data-state=listening] .kloudy-indicator-orb{animation-duration:.6s}.kloudy-indicator[data-state=thinking] .kloudy-indicator-orb{animation:kloudy-status-think 2.4s ease-in-out infinite}.kloudy-indicator[data-state=speaking] .kloudy-indicator-orb{animation-duration:.35s}.kloudy-indicator:is([data-state=waiting],[data-state=error]) .kloudy-indicator-orb{animation:none}}
+.kloudy-indicator{display:inline-flex;align-items:center;justify-content:center;flex-direction:column;gap:2px;min-width:40px;min-height:40px;font:10px/1 system-ui;color:inherit}
+.kloudy-indicator-orb{position:relative;display:block;width:22px;height:22px;border-radius:50%;background:radial-gradient(circle at 35% 25%,#b477ff,#5c21b9 62%,#bd8ff6 68%,#431180 78%);box-shadow:0 0 5px #a574e6}
+.kloudy-indicator-orb:before,.kloudy-indicator-orb:after{content:'';position:absolute;top:45%;width:3px;height:3px;border-radius:50%;background:#d0ffff;box-shadow:0 0 4px #68dcff}.kloudy-indicator-orb:before{left:27%}.kloudy-indicator-orb:after{right:27%}
+@keyframes kloudy-status-idle{50%{filter:brightness(1.2);transform:translateX(.3px)}}@keyframes kloudy-status-think{50%{transform:scale(.25);filter:brightness(1.7)}}
+@media(prefers-reduced-motion:no-preference){.kloudy-indicator-orb{animation:kloudy-status-idle 3.6s ease-in-out infinite}.kloudy-indicator[data-state=listening] .kloudy-indicator-orb{animation-duration:.6s}.kloudy-indicator[data-state=thinking] .kloudy-indicator-orb{animation:kloudy-status-think 2.4s ease-in-out infinite}.kloudy-indicator[data-state=speaking] .kloudy-indicator-orb{animation-duration:.35s}.kloudy-indicator:is([data-state=waiting],[data-state=error]) .kloudy-indicator-orb{animation:none}}

package/src/strings.mjs

@@ -1,51 +1,51 @@
-import {mkdir,readFile,writeFile,rename,rmdir} from 'node:fs/promises';
-import {dirname,resolve} from 'node:path';
-import {randomUUID} from 'node:crypto';
-import {KloudyError} from './client.mjs';
-import {homedir} from 'node:os';
-import {withConnection} from './connection.mjs';
-const fail=(code,message)=>{throw new KloudyError(code,message);};
-const id=value=>typeof value==='string'&&/^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,63}$/.test(value);
-function selection(value){
- if(!value||Object.keys(value).some(k=>!['source','kind','goal'].includes(k))||!id(value.source)||!['mcp','sdk','cli'].includes(value.kind)||typeof value.goal!=='string'||!value.goal.trim()||value.goal.length>500)fail('invalid_selection','Use a source alias, mcp/sdk/cli kind, and a goal of 1–500 characters. Credentials and tool definitions do not belong in a saved string.');
- return {source:value.source,kind:value.kind,goal:value.goal.trim()};
-}
-// Durable intent references only. Engine-owned selections and schemas are refreshed
-// at use time; this never replays a stale selection or invokes a provider action.
-export class StringStore {
- constructor({file,project,connect,now=()=>Date.now()}){if(!file||!project||typeof connect!=='function')fail('invalid_store','A private store, project ID and connection resolver are required.');this.file=resolve(file);this.project=resolve(project);this.connect=connect;this.now=now;}
- async read(){try{const value=JSON.parse(await readFile(this.file,'utf8'));if(value.schema!=='kloudy.strings/1'||!Array.isArray(value.strings)||value.strings.length>100)throw Error();return value;}catch(error){if(error.code==='ENOENT')return {schema:'kloudy.strings/1',strings:[]};fail('invalid_store','The saved strings could not be read. No data was replaced.');}}
- async mutate(work){await mkdir(dirname(this.file),{recursive:true,mode:0o700});const lock=this.file+'.lock';try{await mkdir(lock,{mode:0o700});}catch{fail('store_busy','Another strings operation is running. Retry after it finishes.');}try{const value=await this.read(),result=await work(value);const temp=this.file+'.'+randomUUID()+'.tmp';await writeFile(temp,JSON.stringify(value,null,2)+'\n',{flag:'wx',mode:0o600});await rename(temp,this.file);return result;}finally{await rmdir(lock);}}
- async save(name,values){if(!id(name)||!Array.isArray(values)||!values.length||values.length>16)fail('invalid_string','Name the string and choose 1–16 source selections.');const choices=[...new Map(values.map(v=>{const s=selection(v);return[JSON.stringify(s),s];})).values()];return this.mutate(db=>{const old=db.strings.find(s=>s.project===this.project&&s.name===name);if(old)fail('already_saved','This string already exists. Remove it explicitly before replacing it.');if(db.strings.length>=100)fail('store_full','Remove an unused string first.');const value={id:randomUUID(),name,project:this.project,choices,createdAt:this.now(),lastUsedAt:null,retention:'temporary',status:'saved'};db.strings.push(value);return value;});}
- async list(){return (await this.read()).strings.filter(s=>s.project===this.project);}
- async remove(name){return this.mutate(db=>{const index=db.strings.findIndex(s=>s.project===this.project&&s.name===name);if(index<0)fail('not_found','No string with that name exists in this project.');db.strings.splice(index,1);return {name,status:'removed',providerCredentialsRevoked:false};});}
- async keep(name){return this.mutate(db=>{const entry=db.strings.find(s=>s.project===this.project&&s.name===name);if(!entry)fail('not_found','No string with that name exists in this project.');entry.retention='kept';return {...entry,grantStatus:'not_requested',notice:'Saved for reuse. Permanent provider access still requires the existing GlassBreak authorization path.'};});}
- async prune({idleDays=30}={}){if(!Number.isInteger(idleDays)||idleDays<1||idleDays>365)fail('invalid_retention','Use 1–365 idle days.');return this.mutate(db=>{const removed=[];db.strings=db.strings.filter(s=>{const dormant=s.project===this.project&&s.retention!=='kept'&&this.now()-(s.lastUsedAt??s.createdAt)>=idleDays*86400000;if(dormant)removed.push(s.name);return !dormant;});return {removed,providerCredentialsRevoked:false};});}
- async use(name){
-  const entry=(await this.list()).find(s=>s.name===name);if(!entry)fail('not_found','No string with that name exists in this project.');
-  const tools=[],routes=[],selections=[],seen=new Map();
-  for(const raw of entry.choices){const choice=selection(raw);const selected=await this.connect(choice.source,choice.kind,client=>client.ask(choice.goal));const definitions=selected?.toolbox?.tools;if(!Array.isArray(definitions)||definitions.length!==1||!selected.selection_id||!selected.sessionId)fail('selection_unavailable','A saved choice is unavailable or needs renewed authorization. No action ran.');
-   const tool=definitions[0];if(typeof tool.name!=='string'||!tool.name||tool.name.length>128)fail('invalid_response','The source returned an invalid selected tool.');
-   const identity=choice.source+'\n'+tool.name;let alias=seen.get(identity);
-   if(!alias){if(tools.length===8)fail('toolbox_limit','This string selects more than eight tools. Split it into smaller task-specific strings.');alias='s'+tools.length+'_'+tool.name.replace(/[^a-zA-Z0-9_-]/g,'_');seen.set(identity,alias);tools.push({...tool,name:alias});}
-   const route={name:alias,source:choice.source,kind:choice.kind,tool:tool.name,selection_id:selected.selection_id,sessionId:selected.sessionId};routes.push(route);selections.push({...route,arguments:selected.arguments});
-  }
-  await this.mutate(db=>{const latest=db.strings.find(s=>s.project===this.project&&s.name===name);if(!latest||latest.id!==entry.id)fail('removed_during_use','This string was removed while selecting. Select again.');latest.lastUsedAt=this.now();latest.activeRoutes=routes;latest.status='saved';});
-  return {schema:'kloudy.toolbox/1',name,project:this.project,toolbox:{status:'ready',tools,measurements:{definitionsEmitted:tools.length}},routes,selections,notice:'Selections are session-scoped. No provider action was executed; the engine rechecks permission at call time.'};
- }
- async call(name,tool,inputs,{selectionId}={}){
-  const entry=(await this.list()).find(s=>s.name===name),matches=entry?.activeRoutes?.filter(r=>r.name===tool&&(!selectionId||r.selection_id===selectionId))||[];
-  if(matches.length>1)fail('ambiguous_selection','This tool has several owned selections. Choose the exact selection ID from the returned routes.');const route=matches[0];
-  if(!route)fail('not_selected','Use this string first, then choose one exact returned tool alias.');
-  return this.connect(route.source,route.kind,async client=>{await client.session();if(client.state.sessionId!==route.sessionId)fail('stale_selection','The connection session changed. Use this string again before calling a tool.');return client.call(route.tool,inputs,{selectionId:route.selection_id});});
- }
-}
-export function localStrings({project=process.cwd(),home=homedir(),mode='autonomous'}={}){
- const directory=resolve(home,'.kloudy');
- return new StringStore({file:resolve(directory,'strings.json'),project,connect:async(alias,kind,work)=>{
-  let sources;try{sources=JSON.parse(await readFile(resolve(directory,'sources.json'),'utf8'));}catch{fail('sources_unavailable','Configure trusted source aliases in ~/.kloudy/sources.json first.');}
-  const source=Object.hasOwn(sources,alias)?sources[alias]:null;
-  if(!source||source.kind!==kind||typeof source.connection!=='string'||!source.connection)fail('source_unavailable','This source alias is missing or has a different adapter kind.');
-  return withConnection(resolve(directory,source.connection),work,{mode});
- }});
-}
+import {mkdir,readFile,writeFile,rename,rmdir} from 'node:fs/promises';
+import {dirname,resolve} from 'node:path';
+import {randomUUID} from 'node:crypto';
+import {KloudyError} from './client.mjs';
+import {homedir} from 'node:os';
+import {withConnection} from './connection.mjs';
+const fail=(code,message)=>{throw new KloudyError(code,message);};
+const id=value=>typeof value==='string'&&/^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,63}$/.test(value);
+function selection(value){
+ if(!value||Object.keys(value).some(k=>!['source','kind','goal'].includes(k))||!id(value.source)||!['mcp','sdk','cli'].includes(value.kind)||typeof value.goal!=='string'||!value.goal.trim()||value.goal.length>500)fail('invalid_selection','Use a source alias, mcp/sdk/cli kind, and a goal of 1–500 characters. Credentials and tool definitions do not belong in a saved string.');
+ return {source:value.source,kind:value.kind,goal:value.goal.trim()};
+}
+// Durable intent references only. Engine-owned selections and schemas are refreshed
+// at use time; this never replays a stale selection or invokes a provider action.
+export class StringStore {
+ constructor({file,project,connect,now=()=>Date.now()}){if(!file||!project||typeof connect!=='function')fail('invalid_store','A private store, project ID and connection resolver are required.');this.file=resolve(file);this.project=resolve(project);this.connect=connect;this.now=now;}
+ async read(){try{const value=JSON.parse(await readFile(this.file,'utf8'));if(value.schema!=='kloudy.strings/1'||!Array.isArray(value.strings)||value.strings.length>100)throw Error();return value;}catch(error){if(error.code==='ENOENT')return {schema:'kloudy.strings/1',strings:[]};fail('invalid_store','The saved strings could not be read. No data was replaced.');}}
+ async mutate(work){await mkdir(dirname(this.file),{recursive:true,mode:0o700});const lock=this.file+'.lock';try{await mkdir(lock,{mode:0o700});}catch{fail('store_busy','Another strings operation is running. Retry after it finishes.');}try{const value=await this.read(),result=await work(value);const temp=this.file+'.'+randomUUID()+'.tmp';await writeFile(temp,JSON.stringify(value,null,2)+'\n',{flag:'wx',mode:0o600});await rename(temp,this.file);return result;}finally{await rmdir(lock);}}
+ async save(name,values){if(!id(name)||!Array.isArray(values)||!values.length||values.length>16)fail('invalid_string','Name the string and choose 1–16 source selections.');const choices=[...new Map(values.map(v=>{const s=selection(v);return[JSON.stringify(s),s];})).values()];return this.mutate(db=>{const old=db.strings.find(s=>s.project===this.project&&s.name===name);if(old)fail('already_saved','This string already exists. Remove it explicitly before replacing it.');if(db.strings.length>=100)fail('store_full','Remove an unused string first.');const value={id:randomUUID(),name,project:this.project,choices,createdAt:this.now(),lastUsedAt:null,retention:'temporary',status:'saved'};db.strings.push(value);return value;});}
+ async list(){return (await this.read()).strings.filter(s=>s.project===this.project);}
+ async remove(name){return this.mutate(db=>{const index=db.strings.findIndex(s=>s.project===this.project&&s.name===name);if(index<0)fail('not_found','No string with that name exists in this project.');db.strings.splice(index,1);return {name,status:'removed',providerCredentialsRevoked:false};});}
+ async keep(name){return this.mutate(db=>{const entry=db.strings.find(s=>s.project===this.project&&s.name===name);if(!entry)fail('not_found','No string with that name exists in this project.');entry.retention='kept';return {...entry,grantStatus:'not_requested',notice:'Saved for reuse. Permanent provider access still requires the existing GlassBreak authorization path.'};});}
+ async prune({idleDays=30}={}){if(!Number.isInteger(idleDays)||idleDays<1||idleDays>365)fail('invalid_retention','Use 1–365 idle days.');return this.mutate(db=>{const removed=[];db.strings=db.strings.filter(s=>{const dormant=s.project===this.project&&s.retention!=='kept'&&this.now()-(s.lastUsedAt??s.createdAt)>=idleDays*86400000;if(dormant)removed.push(s.name);return !dormant;});return {removed,providerCredentialsRevoked:false};});}
+ async use(name){
+  const entry=(await this.list()).find(s=>s.name===name);if(!entry)fail('not_found','No string with that name exists in this project.');
+  const tools=[],routes=[],selections=[],seen=new Map();
+  for(const raw of entry.choices){const choice=selection(raw);const selected=await this.connect(choice.source,choice.kind,client=>client.ask(choice.goal));const definitions=selected?.toolbox?.tools;if(!Array.isArray(definitions)||definitions.length!==1||!selected.selection_id||!selected.sessionId)fail('selection_unavailable','A saved choice is unavailable or needs renewed authorization. No action ran.');
+   const tool=definitions[0];if(typeof tool.name!=='string'||!tool.name||tool.name.length>128)fail('invalid_response','The source returned an invalid selected tool.');
+   const identity=choice.source+'\n'+tool.name;let alias=seen.get(identity);
+   if(!alias){if(tools.length===8)fail('toolbox_limit','This string selects more than eight tools. Split it into smaller task-specific strings.');alias='s'+tools.length+'_'+tool.name.replace(/[^a-zA-Z0-9_-]/g,'_');seen.set(identity,alias);tools.push({...tool,name:alias});}
+   const route={name:alias,source:choice.source,kind:choice.kind,tool:tool.name,selection_id:selected.selection_id,sessionId:selected.sessionId};routes.push(route);selections.push({...route,arguments:selected.arguments});
+  }
+  await this.mutate(db=>{const latest=db.strings.find(s=>s.project===this.project&&s.name===name);if(!latest||latest.id!==entry.id)fail('removed_during_use','This string was removed while selecting. Select again.');latest.lastUsedAt=this.now();latest.activeRoutes=routes;latest.status='saved';});
+  return {schema:'kloudy.toolbox/1',name,project:this.project,toolbox:{status:'ready',tools,measurements:{definitionsEmitted:tools.length}},routes,selections,notice:'Selections are session-scoped. No provider action was executed; the engine rechecks permission at call time.'};
+ }
+ async call(name,tool,inputs,{selectionId}={}){
+  const entry=(await this.list()).find(s=>s.name===name),matches=entry?.activeRoutes?.filter(r=>r.name===tool&&(!selectionId||r.selection_id===selectionId))||[];
+  if(matches.length>1)fail('ambiguous_selection','This tool has several owned selections. Choose the exact selection ID from the returned routes.');const route=matches[0];
+  if(!route)fail('not_selected','Use this string first, then choose one exact returned tool alias.');
+  return this.connect(route.source,route.kind,async client=>{await client.session();if(client.state.sessionId!==route.sessionId)fail('stale_selection','The connection session changed. Use this string again before calling a tool.');return client.call(route.tool,inputs,{selectionId:route.selection_id});});
+ }
+}
+export function localStrings({project=process.cwd(),home=homedir(),mode='autonomous'}={}){
+ const directory=resolve(home,'.kloudy');
+ return new StringStore({file:resolve(directory,'strings.json'),project,connect:async(alias,kind,work)=>{
+  let sources;try{sources=JSON.parse(await readFile(resolve(directory,'sources.json'),'utf8'));}catch{fail('sources_unavailable','Configure trusted source aliases in ~/.kloudy/sources.json first.');}
+  const source=Object.hasOwn(sources,alias)?sources[alias]:null;
+  if(!source||source.kind!==kind||typeof source.connection!=='string'||!source.connection)fail('source_unavailable','This source alias is missing or has a different adapter kind.');
+  return withConnection(resolve(directory,source.connection),work,{mode});
+ }});
+}

package/src/terminal-status.mjs

@@ -1,6 +1,6 @@
-// stderr only: structured stdout and MCP transports must remain machine-readable.
-export function terminalStatus({stream=process.stderr,enabled=stream.isTTY&&!process.env.CI&&!process.env.NO_COLOR,interval=setInterval,clear=clearInterval}={}){
- let timer=null,index=0;
- const stop=()=>{if(timer){clear(timer);timer=null;}if(enabled)stream.write('\r\u001b[2K');};
- return {update(event){if(!enabled||event?.schema!=='kloudy.activity/1'||event.source!=='kloudy')return;stop();if(event.state==='thinking'){const tick=()=>stream.write('\rKloudy is working'+['.  ','.. ','...'][index++%3]);tick();timer=interval(tick,600);timer.unref?.();}else if(event.state==='waiting')stream.write('Kloudy needs your approval.\n');else if(event.state==='error')stream.write('Kloudy could not finish.\n');},dispose:stop};
-}
+// stderr only: structured stdout and MCP transports must remain machine-readable.
+export function terminalStatus({stream=process.stderr,enabled=stream.isTTY&&!process.env.CI&&!process.env.NO_COLOR,interval=setInterval,clear=clearInterval}={}){
+ let timer=null,index=0;
+ const stop=()=>{if(timer){clear(timer);timer=null;}if(enabled)stream.write('\r\u001b[2K');};
+ return {update(event){if(!enabled||event?.schema!=='kloudy.activity/1'||event.source!=='kloudy')return;stop();if(event.state==='thinking'){const tick=()=>stream.write('\rKloudy is working'+['.  ','.. ','...'][index++%3]);tick();timer=interval(tick,600);timer.unref?.();}else if(event.state==='waiting')stream.write('Kloudy needs your approval.\n');else if(event.state==='error')stream.write('Kloudy could not finish.\n');},dispose:stop};
+}

package/src/website-return.mjs

@@ -1,18 +1,18 @@
-// Delivery keys protect inert presentation data. They never authorize engine calls.
-import {generateKeyPairSync,createPublicKey,diffieHellman,hkdfSync,createDecipheriv,createHash} from 'node:crypto';
-const version='kloudy.website-return/1',hash=s=>createHash('sha256').update(s).digest('hex'),origin='https://kloudy.ai',root=origin+'/api/customer/visual-chooser/return/';
-export const websiteReturnTool={name:'receive_website_selection',description:'Wait for the exact inert selection returned by the signed-in website to this MCP connection. No IDE extension, website cookie, account token, model or grant is needed. Use after showing the chooser link. A waiting result is safe to check again; do not repeat mutations after uncertain outcomes.',inputSchema:{type:'object',additionalProperties:false,properties:{waitSeconds:{type:'integer',minimum:0,maximum:45}}},annotations:{readOnlyHint:true,destructiveHint:false,idempotentHint:true,openWorldHint:false}};
-export class WebsiteSelectionReturn{
- constructor({fetcher=fetch,clock=()=>Date.now(),sleep=ms=>new Promise(r=>setTimeout(r,ms))}={}){Object.assign(this,{fetcher,clock,sleep});this.keys=generateKeyPairSync('x25519');this.publicKey=this.keys.publicKey.export({format:'jwk'}).x;this.sequence=0;this.receipt=null;}
- async request(action,input){const response=await this.fetcher(root+action,{method:'POST',headers:{origin,'content-type':'application/json'},body:JSON.stringify(input),redirect:'error',signal:AbortSignal.timeout(10000)});const text=await response.text();if(text.length>300000)throw Error('Return response exceeds the bounded manifest');const value=JSON.parse(text);if(!response.ok)throw Error(typeof value.error==='string'?value.error:'Website return unavailable');return value;}
- async open(goal){if(this.link)return this.link;if(typeof goal!=='string'||!goal.trim()||goal.length>1000)throw Error('Use a presentation goal up to 1000 characters');const result=await this.request('open',{publicKey:this.publicKey,goal});if(result.version!==version||!/^[a-f0-9]{32}$/.test(result.id)||result.linkIsAuthorization!==false||result.chooserUrl!==origin+'/api/customer/visual-chooser/start#return='+result.id||result.pairCode!==hash(result.id+':'+this.publicKey).slice(0,8).toUpperCase())throw Error('Unexpected website return attachment');this.link=result;return result;}
- decrypt(envelope){
-  if(envelope?.version!==version||envelope.id!==this.link?.id||envelope.sequence!==this.sequence+1||!/^[A-Za-z0-9_-]{43}$/.test(envelope.serverPublicKey)||!/^[A-Za-z0-9_-]{16}$/.test(envelope.iv)||!/^[A-Za-z0-9_-]{22}$/.test(envelope.tag)||typeof envelope.ciphertext!=='string'||envelope.ciphertext.length>270000)throw Error('Unexpected return envelope');
-  const aad=JSON.stringify([version,this.link.id,hash(this.publicKey),envelope.sequence]),peer=createPublicKey({key:{kty:'OKP',crv:'X25519',x:envelope.serverPublicKey},format:'jwk'}),secret=diffieHellman({privateKey:this.keys.privateKey,publicKey:peer}),key=Buffer.from(hkdfSync('sha256',secret,Buffer.alloc(0),Buffer.from(aad),32)),decipher=createDecipheriv('aes-256-gcm',key,Buffer.from(envelope.iv,'base64url'));decipher.setAAD(Buffer.from(aad));decipher.setAuthTag(Buffer.from(envelope.tag,'base64url'));const payload=JSON.parse(Buffer.concat([decipher.update(Buffer.from(envelope.ciphertext,'base64url')),decipher.final()]).toString()),s=payload.result?.structuredContent,m=s?.selectedManifest;
-  if(payload.version!==version||payload.accountProjectVerified!==true||payload.executionAllowed!==false||typeof payload.conversationId!=='string'||typeof payload.receiptId!=='string'||payload.projectId!==m?.projectId||payload.projectId!==s?.projectState?.projectId||payload.revision!==s.revision||m.revision!==s.revision||s.executed!==false||m.executionAllowed!==false||m.authorizesSpending!==false||m.authorizesInstallation!==false)throw Error('Website selection is not an exact inert project manifest');
-  if(this.receipt&&(payload.projectId!==this.receipt.projectId||payload.conversationId!==this.receipt.conversationId||s.projectState.originalGoal!==this.receipt.result.structuredContent.projectState.originalGoal))throw Error('Account project or original conversation changed');
-  if(typeof payload.ackNonce!=='string'||!/^[A-Za-z0-9_-]{43}$/.test(payload.ackNonce))throw Error('Missing exact delivery acknowledgment');this.pendingAck={id:this.link.id,sequence:envelope.sequence,nonce:payload.ackNonce};delete payload.ackNonce;this.sequence=envelope.sequence;this.receipt=payload;return payload;
- }
- async receive({waitSeconds=45}={}){if(!Number.isInteger(waitSeconds)||waitSeconds<0||waitSeconds>45)throw Error('Wait up to 45 seconds');if(!this.link)return {state:'not-open',instructions:'Show the visual chooser with your goal first.'};if(this.pendingAck){await this.request('ack',this.pendingAck);this.pendingAck=null;return {state:'received',...this.receipt};}const end=this.clock()+waitSeconds*1000;do{const value=await this.request('poll',{id:this.link.id,afterSequence:this.sequence});if(value.version!==version||!['waiting','ready'].includes(value.state))throw Error('Unknown website return state');if(value.state==='ready'){const receipt=this.decrypt(value.envelope);try{await this.request('ack',this.pendingAck);this.pendingAck=null;return {state:'received',...receipt};}catch{return {state:'received-acknowledgment-unconfirmed',...receipt};}}if(this.clock()>=end)break;await this.sleep(Math.min(2000,end-this.clock()));}while(this.clock()<=end);return {state:'waiting',chooserUrl:this.link.chooserUrl,pairCode:this.link.pairCode,conversationId:this.receipt?.conversationId??null,lastReceipt:this.receipt??null};}
- close(){this.keys=null;this.link=null;this.receipt=null;}
-}
+// Delivery keys protect inert presentation data. They never authorize engine calls.
+import {generateKeyPairSync,createPublicKey,diffieHellman,hkdfSync,createDecipheriv,createHash} from 'node:crypto';
+const version='kloudy.website-return/1',hash=s=>createHash('sha256').update(s).digest('hex'),origin='https://kloudy.ai',root=origin+'/api/customer/visual-chooser/return/';
+export const websiteReturnTool={name:'receive_website_selection',description:'Wait for the exact inert selection returned by the signed-in website to this MCP connection. No IDE extension, website cookie, account token, model or grant is needed. Use after showing the chooser link. A waiting result is safe to check again; do not repeat mutations after uncertain outcomes.',inputSchema:{type:'object',additionalProperties:false,properties:{waitSeconds:{type:'integer',minimum:0,maximum:45}}},annotations:{readOnlyHint:true,destructiveHint:false,idempotentHint:true,openWorldHint:false}};
+export class WebsiteSelectionReturn{
+ constructor({fetcher=fetch,clock=()=>Date.now(),sleep=ms=>new Promise(r=>setTimeout(r,ms))}={}){Object.assign(this,{fetcher,clock,sleep});this.keys=generateKeyPairSync('x25519');this.publicKey=this.keys.publicKey.export({format:'jwk'}).x;this.sequence=0;this.receipt=null;}
+ async request(action,input){const response=await this.fetcher(root+action,{method:'POST',headers:{origin,'content-type':'application/json'},body:JSON.stringify(input),redirect:'error',signal:AbortSignal.timeout(10000)});const text=await response.text();if(text.length>300000)throw Error('Return response exceeds the bounded manifest');const value=JSON.parse(text);if(!response.ok)throw Error(typeof value.error==='string'?value.error:'Website return unavailable');return value;}
+ async open(goal){if(this.link)return this.link;if(typeof goal!=='string'||!goal.trim()||goal.length>1000)throw Error('Use a presentation goal up to 1000 characters');const result=await this.request('open',{publicKey:this.publicKey,goal});if(result.version!==version||!/^[a-f0-9]{32}$/.test(result.id)||result.linkIsAuthorization!==false||result.chooserUrl!==origin+'/api/customer/visual-chooser/start#return='+result.id||result.pairCode!==hash(result.id+':'+this.publicKey).slice(0,8).toUpperCase())throw Error('Unexpected website return attachment');this.link=result;return result;}
+ decrypt(envelope){
+  if(envelope?.version!==version||envelope.id!==this.link?.id||envelope.sequence!==this.sequence+1||!/^[A-Za-z0-9_-]{43}$/.test(envelope.serverPublicKey)||!/^[A-Za-z0-9_-]{16}$/.test(envelope.iv)||!/^[A-Za-z0-9_-]{22}$/.test(envelope.tag)||typeof envelope.ciphertext!=='string'||envelope.ciphertext.length>270000)throw Error('Unexpected return envelope');
+  const aad=JSON.stringify([version,this.link.id,hash(this.publicKey),envelope.sequence]),peer=createPublicKey({key:{kty:'OKP',crv:'X25519',x:envelope.serverPublicKey},format:'jwk'}),secret=diffieHellman({privateKey:this.keys.privateKey,publicKey:peer}),key=Buffer.from(hkdfSync('sha256',secret,Buffer.alloc(0),Buffer.from(aad),32)),decipher=createDecipheriv('aes-256-gcm',key,Buffer.from(envelope.iv,'base64url'));decipher.setAAD(Buffer.from(aad));decipher.setAuthTag(Buffer.from(envelope.tag,'base64url'));const payload=JSON.parse(Buffer.concat([decipher.update(Buffer.from(envelope.ciphertext,'base64url')),decipher.final()]).toString()),s=payload.result?.structuredContent,m=s?.selectedManifest;
+  if(payload.version!==version||payload.accountProjectVerified!==true||payload.executionAllowed!==false||typeof payload.conversationId!=='string'||typeof payload.receiptId!=='string'||payload.projectId!==m?.projectId||payload.projectId!==s?.projectState?.projectId||payload.revision!==s.revision||m.revision!==s.revision||s.executed!==false||m.executionAllowed!==false||m.authorizesSpending!==false||m.authorizesInstallation!==false)throw Error('Website selection is not an exact inert project manifest');
+  if(this.receipt&&(payload.projectId!==this.receipt.projectId||payload.conversationId!==this.receipt.conversationId||s.projectState.originalGoal!==this.receipt.result.structuredContent.projectState.originalGoal))throw Error('Account project or original conversation changed');
+  if(typeof payload.ackNonce!=='string'||!/^[A-Za-z0-9_-]{43}$/.test(payload.ackNonce))throw Error('Missing exact delivery acknowledgment');this.pendingAck={id:this.link.id,sequence:envelope.sequence,nonce:payload.ackNonce};delete payload.ackNonce;this.sequence=envelope.sequence;this.receipt=payload;return payload;
+ }
+ async receive({waitSeconds=45}={}){if(!Number.isInteger(waitSeconds)||waitSeconds<0||waitSeconds>45)throw Error('Wait up to 45 seconds');if(!this.link)return {state:'not-open',instructions:'Show the visual chooser with your goal first.'};if(this.pendingAck){await this.request('ack',this.pendingAck);this.pendingAck=null;return {state:'received',...this.receipt};}const end=this.clock()+waitSeconds*1000;do{const value=await this.request('poll',{id:this.link.id,afterSequence:this.sequence});if(value.version!==version||!['waiting','ready'].includes(value.state))throw Error('Unknown website return state');if(value.state==='ready'){const receipt=this.decrypt(value.envelope);try{await this.request('ack',this.pendingAck);this.pendingAck=null;return {state:'received',...receipt};}catch{return {state:'received-acknowledgment-unconfirmed',...receipt};}}if(this.clock()>=end)break;await this.sleep(Math.min(2000,end-this.clock()));}while(this.clock()<=end);return {state:'waiting',chooserUrl:this.link.chooserUrl,pairCode:this.link.pairCode,conversationId:this.receipt?.conversationId??null,lastReceipt:this.receipt??null};}
+ close(){this.keys=null;this.link=null;this.receipt=null;}
+}

package/src/welcome.mjs

@@ -1,8 +1,8 @@
-export const cloudVisual=String.raw`        .--------.
-    .---'  .--.  '---.
- .-'   .--'    '--.   '-.
-(      [ K L O U D Y ]   )
- '----.____________.----'
-       :: BOT WIDE WEB ::`;
-export const welcomeText='Welcome to Kloudy. You are at the Bot Wide Web door. Just type Kloudy to direct this IDE here; it can also use Kloudy for relevant tasks without that prefix. Only the tools needed for this project come in.';
-export const welcomeContent=result=>[{type:'text',text:'```text\n'+cloudVisual+'\n```\n\n'+welcomeText+'\n\n'+JSON.stringify(result)}];
+export const cloudVisual=String.raw`        .--------.
+    .---'  .--.  '---.
+ .-'   .--'    '--.   '-.
+(      [ K L O U D Y ]   )
+ '----.____________.----'
+       :: BOT WIDE WEB ::`;
+export const welcomeText='Welcome to Kloudy. You are at the Bot Wide Web door. Just type Kloudy to direct this IDE here; it can also use Kloudy for relevant tasks without that prefix. Only the tools needed for this project come in.';
+export const welcomeContent=result=>[{type:'text',text:'```text\n'+cloudVisual+'\n```\n\n'+welcomeText+'\n\n'+JSON.stringify(result)}];

package/src/wrap.mjs

@@ -1,58 +1,58 @@
-import {createServer} from 'node:http';
-import {createHash,timingSafeEqual} from 'node:crypto';
-import {Client} from '@modelcontextprotocol/sdk/client/index.js';
-import {StdioClientTransport} from '@modelcontextprotocol/sdk/client/stdio.js';
-import {Server} from '@modelcontextprotocol/sdk/server/index.js';
-import {StreamableHTTPServerTransport} from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import {ListToolsRequestSchema,CallToolRequestSchema} from '@modelcontextprotocol/sdk/types.js';
-import {KloudyError} from './client.mjs';
-const hash=x=>createHash('sha256').update(x).digest();
-export function createWrapper({command,args=[],tools,token,env={},timeout=10000,maxConcurrent=2}){
-  if(typeof command!=='string'||!command||!Array.isArray(args)||args.some(x=>typeof x!=='string')||!Array.isArray(tools)||!tools.length||tools.length>8||tools.some(x=>typeof x!=='string'||!/^[-\w.]{1,100}$/.test(x))||typeof token!=='string'||token.length<24)throw new KloudyError('invalid_wrapper','Specify an approved command, 1–8 selected tools and a strong bearer from the local host.');
-  const allowed=new Set(tools);let active=0;
-  return createServer(async(req,res)=>{
-    const send=(status,error)=>{if(!res.headersSent){res.writeHead(status,{'content-type':'application/json','cache-control':'no-store'});res.end(JSON.stringify({error}));}};
-    // Loopback-only host and no browser-origin requests. TLS/public grant policy belongs at the owning deployment edge.
-    if(!/^(127\.0\.0\.1|localhost|\[::1\])(?::\d+)?$/.test(req.headers.host||'')||req.headers.origin)return send(403,'origin_not_allowed');
-    if(req.url!=='/mcp')return send(404,'not_found');
-    if(!timingSafeEqual(hash(req.headers.authorization||''),hash('Bearer '+token)))return send(401,'unauthorized');
-    if(req.method!=='POST')return send(405,'method_not_allowed');
-    if(!req.headers['content-type']?.startsWith('application/json'))return send(415,'json_required');
-    if(active>=maxConcurrent)return send(429,'busy');
-    active++;let upstream,server,transport,timer;
-    try{
-      let data='';for await(const chunk of req){data+=chunk;if(Buffer.byteLength(data)>65536)return send(413,'too_large');}
-      let body;try{body=JSON.parse(data);}catch{return send(400,'invalid_json');}
-      if(Array.isArray(body)||!body||body.jsonrpc!=='2.0')return send(400,'invalid_request');
-      if(body.method==='tools/call'&&!allowed.has(body.params?.name))return send(403,'tool_not_selected');
-      if(!['initialize','notifications/initialized','tools/list','tools/call','ping'].includes(body.method))return send(400,'unsupported_method');
-      const client=new Client({name:'kloudy-httpk-wrap',version:'0.1.0'});
-      upstream=new StdioClientTransport({command,args,env,stderr:'pipe'});
-      // No upstream stderr or credential values are reflected into HTTP responses or logs.
-      upstream.stderr?.on('data',()=>{});
-      timer=setTimeout(()=>{send(504,'upstream_timeout');upstream.close().catch(()=>{});},timeout);
-      await client.connect(upstream);
-      let callResult;
-      if(body.method==='tools/call')callResult=await client.callTool(body.params,undefined,{timeout});
-      server=new Server({name:'kloudy-httpk',version:'0.1.0'},{capabilities:{tools:{}}});
-      server.setRequestHandler(ListToolsRequestSchema,async()=>{
-        const selected=[];let cursor;
-        for(let page=0;page<10;page++){
-          const value=await client.listTools(cursor?{cursor}:undefined);
-          for(const tool of value.tools)if(allowed.has(tool.name))selected.push({name:tool.name,description:tool.description,inputSchema:tool.inputSchema});
-          cursor=value.nextCursor;if(!cursor)break;
-          if(page===9)throw new Error('Catalog limit');
-        }
-        return {tools:selected};
-      });
-      server.setRequestHandler(CallToolRequestSchema,async request=>{
-        if(!allowed.has(request.params.name))throw new Error('Tool not selected');
-        return callResult;
-      });
-      transport=new StreamableHTTPServerTransport({sessionIdGenerator:undefined,enableJsonResponse:true});
-      await server.connect(transport);
-      await transport.handleRequest(req,res,body);
-    }catch{send(502,'upstream_unavailable');}
-    finally{clearTimeout(timer);await transport?.close().catch(()=>{});await server?.close().catch(()=>{});await upstream?.close().catch(()=>{});active--;}
-  });
-}
+import {createServer} from 'node:http';
+import {createHash,timingSafeEqual} from 'node:crypto';
+import {Client} from '@modelcontextprotocol/sdk/client/index.js';
+import {StdioClientTransport} from '@modelcontextprotocol/sdk/client/stdio.js';
+import {Server} from '@modelcontextprotocol/sdk/server/index.js';
+import {StreamableHTTPServerTransport} from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import {ListToolsRequestSchema,CallToolRequestSchema} from '@modelcontextprotocol/sdk/types.js';
+import {KloudyError} from './client.mjs';
+const hash=x=>createHash('sha256').update(x).digest();
+export function createWrapper({command,args=[],tools,token,env={},timeout=10000,maxConcurrent=2}){
+  if(typeof command!=='string'||!command||!Array.isArray(args)||args.some(x=>typeof x!=='string')||!Array.isArray(tools)||!tools.length||tools.length>8||tools.some(x=>typeof x!=='string'||!/^[-\w.]{1,100}$/.test(x))||typeof token!=='string'||token.length<24)throw new KloudyError('invalid_wrapper','Specify an approved command, 1–8 selected tools and a strong bearer from the local host.');
+  const allowed=new Set(tools);let active=0;
+  return createServer(async(req,res)=>{
+    const send=(status,error)=>{if(!res.headersSent){res.writeHead(status,{'content-type':'application/json','cache-control':'no-store'});res.end(JSON.stringify({error}));}};
+    // Loopback-only host and no browser-origin requests. TLS/public grant policy belongs at the owning deployment edge.
+    if(!/^(127\.0\.0\.1|localhost|\[::1\])(?::\d+)?$/.test(req.headers.host||'')||req.headers.origin)return send(403,'origin_not_allowed');
+    if(req.url!=='/mcp')return send(404,'not_found');
+    if(!timingSafeEqual(hash(req.headers.authorization||''),hash('Bearer '+token)))return send(401,'unauthorized');
+    if(req.method!=='POST')return send(405,'method_not_allowed');
+    if(!req.headers['content-type']?.startsWith('application/json'))return send(415,'json_required');
+    if(active>=maxConcurrent)return send(429,'busy');
+    active++;let upstream,server,transport,timer;
+    try{
+      let data='';for await(const chunk of req){data+=chunk;if(Buffer.byteLength(data)>65536)return send(413,'too_large');}
+      let body;try{body=JSON.parse(data);}catch{return send(400,'invalid_json');}
+      if(Array.isArray(body)||!body||body.jsonrpc!=='2.0')return send(400,'invalid_request');
+      if(body.method==='tools/call'&&!allowed.has(body.params?.name))return send(403,'tool_not_selected');
+      if(!['initialize','notifications/initialized','tools/list','tools/call','ping'].includes(body.method))return send(400,'unsupported_method');
+      const client=new Client({name:'kloudy-httpk-wrap',version:'0.1.0'});
+      upstream=new StdioClientTransport({command,args,env,stderr:'pipe'});
+      // No upstream stderr or credential values are reflected into HTTP responses or logs.
+      upstream.stderr?.on('data',()=>{});
+      timer=setTimeout(()=>{send(504,'upstream_timeout');upstream.close().catch(()=>{});},timeout);
+      await client.connect(upstream);
+      let callResult;
+      if(body.method==='tools/call')callResult=await client.callTool(body.params,undefined,{timeout});
+      server=new Server({name:'kloudy-httpk',version:'0.1.0'},{capabilities:{tools:{}}});
+      server.setRequestHandler(ListToolsRequestSchema,async()=>{
+        const selected=[];let cursor;
+        for(let page=0;page<10;page++){
+          const value=await client.listTools(cursor?{cursor}:undefined);
+          for(const tool of value.tools)if(allowed.has(tool.name))selected.push({name:tool.name,description:tool.description,inputSchema:tool.inputSchema});
+          cursor=value.nextCursor;if(!cursor)break;
+          if(page===9)throw new Error('Catalog limit');
+        }
+        return {tools:selected};
+      });
+      server.setRequestHandler(CallToolRequestSchema,async request=>{
+        if(!allowed.has(request.params.name))throw new Error('Tool not selected');
+        return callResult;
+      });
+      transport=new StreamableHTTPServerTransport({sessionIdGenerator:undefined,enableJsonResponse:true});
+      await server.connect(transport);
+      await transport.handleRequest(req,res,body);
+    }catch{send(502,'upstream_unavailable');}
+    finally{clearTimeout(timer);await transport?.close().catch(()=>{});await server?.close().catch(()=>{});await upstream?.close().catch(()=>{});active--;}
+  });
+}