From b8c37ce618e46e2b03cf924e056998f63c42c56c Mon Sep 17 00:00:00 2001
From: DevMando <codefilez@gmail.com>
Date: Tue, 28 Jul 2026 22:04:13 -0700
Subject: [PATCH] v0.14.1: callsigns by default, onboarding button order, cloud
 403 guidance
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- New agents draw callsigns by default; numbered naming becomes the opt-in
  (explicit prior choices are preserved via the panel-state null-coalesce)
- Can't-reach-Ollama screen: install actions lead, endpoint override marked
  Not Recommended, plain-language diagnosis with the socket error dimmed
- Cloud models need an active ollama.com subscription: stated at every
  selection point, and 403 responses get an explanation card instead of a
  raw error (distinct from 401 — the sign-in walkthrough can't fix a 403)
---
 CHANGELOG.md                                  | 26 ++++++++++++++
 .../ResponseStreamerTests.cs                  | 28 +++++++++++++++
 src/MandoCode.Desktop/MainWindow.xaml         |  2 +-
 src/MandoCode.Desktop/MainWindow.xaml.cs      |  5 ++-
 .../MandoCode.Desktop.csproj                  |  2 +-
 .../Services/AgentCallsigns.cs                |  5 +--
 .../ViewModels/ChatController.Wizards.cs      | 35 +++++++++++++------
 .../ViewModels/ChatController.cs              |  6 ++++
 .../ViewModels/ResponseStreamer.cs            | 13 +++++++
 9 files changed, 107 insertions(+), 15 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d8d88d5..2d9906a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,32 @@ ships (the engine drives 0.14 → 0.15; each product's patch number advances
 independently). The exact pinned engine commit is recorded by the `MandoCode`
 submodule.
 
+## [0.14.1] — 2026-07-28
+
+First-five-minutes polish from watching 0.14.0's fresh-machine debut, plus honest guidance
+about cloud model pricing.
+
+### Changed
+- **New agents get callsigns by default.** Tabs now open as Morphy, Kernel, Cloud — the
+  500-name deck — instead of Agent 1, Agent 2. Numbered naming is still one Settings toggle
+  away, and anyone who had explicitly chosen it keeps their choice (only the default flipped).
+- **The "can't reach Ollama" screen puts the likely fix first.** On a machine without Ollama,
+  the options now read: Install Ollama for me → Open the Ollama Download Page (I'll install it
+  myself) → Change the Endpoint URL (Not Recommended) → Retry → Cancel Setup. The endpoint
+  override — the option a fresh machine never needs — used to lead the list. The message now
+  opens with a plain-language diagnosis ("Ollama isn't running on this computer — it may not
+  be installed yet") instead of a raw socket error; the technical detail still shows, dimmed.
+
+### Added
+- **Cloud subscription awareness.** Cloud models on ollama.com now require an account with an
+  active cloud subscription — without one, requests fail with 403 Forbidden, which previously
+  surfaced as a raw error that looked like the app breaking. The subscription requirement is
+  now stated everywhere a cloud model is chosen (the starter picker, the sign-in prompt, and
+  on every model switch to a `:cloud` tag), and a 403 response gets its own explanation card
+  naming the real cause and the two real exits (subscribe, or `/model` to a free local model).
+  Deliberately distinct from the 401 path: 403 does *not* trigger the sign-in walkthrough,
+  which cannot fix it and would loop.
+
 ## [0.14.0] — 2026-07-28
 
 **The first public release of MandoCode Desktop** — the WinUI 3 desktop home for the MandoCode
diff --git a/src/MandoCode.Desktop.Tests/ResponseStreamerTests.cs b/src/MandoCode.Desktop.Tests/ResponseStreamerTests.cs
index 4e1be7d..01d3fc6 100644
--- a/src/MandoCode.Desktop.Tests/ResponseStreamerTests.cs
+++ b/src/MandoCode.Desktop.Tests/ResponseStreamerTests.cs
@@ -143,6 +143,34 @@ public async Task NormalResponse_DoesNotInvoke401()
         Assert.False(fired);
     }
 
+    [Fact]
+    public async Task Response_LookingLike403_ExplainsSubscription_NotSignIn()
+    {
+        // 403 = signed in but no cloud subscription. The sign-in walkthrough (401 recovery)
+        // must NOT fire — it would loop uselessly — and the card must name the real cause.
+        var (s, blocks) = Make(new FakeAiService(new[] { "Error: HTTP 403 (Forbidden) from ollama.com" }));
+        var signInFired = false;
+        s.On401 = () => { signInFired = true; return Task.CompletedTask; };
+
+        await s.StreamAsync("hi", CancellationToken.None);
+
+        Assert.False(signInFired);
+        Assert.Contains(blocks, b => b.StartsWith("WARN:") && b.Contains("subscription"));
+        Assert.Contains(blocks, b => b.StartsWith("DIM:") && b.Contains("/model"));
+    }
+
+    [Fact]
+    public async Task NormalResponse_DoesNotEmit403Card()
+    {
+        // "403" alone in prose (e.g. a line number or HTTP discussion) must not trigger —
+        // the match requires "forbidden" too.
+        var (s, blocks) = Make(new FakeAiService(new[] { "see RFC 9110 section 403 for details" }));
+
+        await s.StreamAsync("hi", CancellationToken.None);
+
+        Assert.DoesNotContain(blocks, b => b.Contains("subscription"));
+    }
+
     [Fact]
     public async Task Cancellation_SurfacesAsWarning_NotThrow()
     {
diff --git a/src/MandoCode.Desktop/MainWindow.xaml b/src/MandoCode.Desktop/MainWindow.xaml
index 699bb73..a3cdd2d 100644
--- a/src/MandoCode.Desktop/MainWindow.xaml
+++ b/src/MandoCode.Desktop/MainWindow.xaml
@@ -1059,7 +1059,7 @@
                                      the change; existing tabs keep their names. -->
                                 <ToggleSwitch x:Name="S_AgentCallsigns" Header="Callsign names for new agents — app-wide"
                                               Toggled="AgentCallsigns_Toggled"
-                                              ToolTipService.ToolTip="Off: new agents are Agent 1, Agent 2, … On: each new agent draws a random callsign — Morphy, Kernel, Cloud — from a 500-name deck that doesn't repeat until it runs dry. Renaming a tab always works either way."/>
+                                              ToolTipService.ToolTip="On (default): each new agent draws a random callsign — Morphy, Kernel, Cloud — from a 500-name deck that doesn't repeat until it runs dry. Off: new agents are Agent 1, Agent 2, … Renaming a tab always works either way."/>
                                 <ToggleSwitch x:Name="S_TaskPlanning" Header="Task planning (propose_plan for multi-step requests)"
                                               Tag="taskPlanning" Toggled="Setting_Toggled"
                                               ToolTipService.ToolTip="For multi-step requests the model first proposes a numbered plan you approve before any work starts. More predictable on big tasks; an extra step on small ones."/>
diff --git a/src/MandoCode.Desktop/MainWindow.xaml.cs b/src/MandoCode.Desktop/MainWindow.xaml.cs
index 339059e..ee40070 100644
--- a/src/MandoCode.Desktop/MainWindow.xaml.cs
+++ b/src/MandoCode.Desktop/MainWindow.xaml.cs
@@ -102,7 +102,10 @@ public MainWindow()
         _historySeenAt = panelState.HistorySeenAt;
         _lastNotePath = panelState.LastNotePath;
         _noteModel = panelState.NoteModel;
-        AgentCallsigns.Enabled = panelState.AgentCallsigns ?? false;
+        // Callsigns are the default face; numbered agents are the opt-in. The null-coalesce
+        // matters: a user who explicitly toggled numbering keeps it (saved false), while
+        // fresh installs and pre-0.14.1 panel states get callsigns.
+        AgentCallsigns.Enabled = panelState.AgentCallsigns ?? true;
         // The editor writes note content; the panel only lists. One store, handed over once.
         NoteEditor.Store = _notes;
         WireNotesPanel();
diff --git a/src/MandoCode.Desktop/MandoCode.Desktop.csproj b/src/MandoCode.Desktop/MandoCode.Desktop.csproj
index ca9514f..7ce8f40 100644
--- a/src/MandoCode.Desktop/MandoCode.Desktop.csproj
+++ b/src/MandoCode.Desktop/MandoCode.Desktop.csproj
@@ -14,7 +14,7 @@
     <WindowsAppSDKSelfContained>true</WindowsAppSDKSelfContained>
     <Nullable>enable</Nullable>
     <ImplicitUsings>enable</ImplicitUsings>
-    <Version>0.14.0</Version>
+    <Version>0.14.1</Version>
     <Authors>Armando Fernandez (DevMando)</Authors>
     <Description>MandoCode Desktop — the MandoCode AI coding agent with a native WinUI 3 interface.</Description>
     <!-- Embedded in the exe → taskbar, Alt-Tab, and Explorer icon. The title-bar icon is set at
diff --git a/src/MandoCode.Desktop/Services/AgentCallsigns.cs b/src/MandoCode.Desktop/Services/AgentCallsigns.cs
index c40dde2..10c718c 100644
--- a/src/MandoCode.Desktop/Services/AgentCallsigns.cs
+++ b/src/MandoCode.Desktop/Services/AgentCallsigns.cs
@@ -14,8 +14,9 @@ namespace MandoCode.Desktop.Services;
 public static class AgentCallsigns
 {
     /// <summary>App-wide naming style for NEW agents — persisted in panel-state.json, toggled
-    /// from Settings → Behavior. Existing tabs keep whatever name they have.</summary>
-    public static bool Enabled { get; set; }
+    /// from Settings → Behavior. Existing tabs keep whatever name they have. ON by default:
+    /// callsigns are the product's face and numbered agents are the opt-in, not the reverse.</summary>
+    public static bool Enabled { get; set; } = true;
 
     private static readonly Random Rng = new();
     private static readonly List<string> Deck = new();
diff --git a/src/MandoCode.Desktop/ViewModels/ChatController.Wizards.cs b/src/MandoCode.Desktop/ViewModels/ChatController.Wizards.cs
index a6a6a64..2f4f8d4 100644
--- a/src/MandoCode.Desktop/ViewModels/ChatController.Wizards.cs
+++ b/src/MandoCode.Desktop/ViewModels/ChatController.Wizards.cs
@@ -171,22 +171,36 @@ private async Task RunSetupWizardAsync()
 
             IsConnected = false;
             var cliInstalled = OllamaSetupHelper.IsOllamaCliInstalled();
+
+            // Options are ordered by likelihood for the population that actually hits this
+            // screen: a fresh machine wants the install actions first, and the endpoint
+            // override (a remote daemon / custom port) is marked Not Recommended — it used
+            // to lead the list, putting the least-relevant choice first. The raw socket
+            // error ("actively refused") reads as a crash to a first-run user, so the
+            // dialog leads with a plain-language diagnosis and the detail rides dimmed.
+            _transcript.Append(_html.Dim(
+                $"MandoCode uses Ollama (free) to run AI models locally. Can't reach {_config.OllamaEndpoint}"
+                + (probe.Error != null ? $" — {probe.Error}" : "") + "."));
+
             var options = new List<ApprovalOption>();
             if (cliInstalled) options.Add(new("Start Ollama now", ApprovalOptionKind.Proceed));
-            options.Add(new("Change endpoint URL", ApprovalOptionKind.Proceed));
             if (!cliInstalled)
             {
                 if (OllamaSetupHelper.GetOsInstallCommand() != null)
                     options.Add(new("Install Ollama for me", ApprovalOptionKind.Proceed));
-                options.Add(new("Open the Ollama download page", ApprovalOptionKind.Proceed));
+                options.Add(new("Open the Ollama Download Page (I'll install it myself)", ApprovalOptionKind.Proceed));
             }
+            options.Add(new("Change the Endpoint URL (Not Recommended)", ApprovalOptionKind.Proceed));
             options.Add(new("Retry", ApprovalOptionKind.Proceed));
-            options.Add(new("Cancel setup", ApprovalOptionKind.Redirect));
+            options.Add(new("Cancel Setup", ApprovalOptionKind.Redirect));
 
             var choice = await WizardSelectAsync(
-                $"Can't reach Ollama at {_config.OllamaEndpoint}. ({probe.Error ?? "no detail"})", options);
+                cliInstalled
+                    ? "Ollama is installed but isn't running. How would you like to proceed?"
+                    : "Ollama isn't running on this computer — it may not be installed yet. How would you like to proceed?",
+                options);
 
-            if (choice == "Cancel setup") { WizardCancelled(); StateChanged?.Invoke(); return; }
+            if (choice == "Cancel Setup") { WizardCancelled(); StateChanged?.Invoke(); return; }
             if (choice == "Retry") continue;
 
             if (choice == "Start Ollama now")
@@ -233,7 +247,7 @@ private async Task RunSetupWizardAsync()
                 continue;
             }
 
-            if (choice == "Open the Ollama download page")
+            if (choice.StartsWith("Open the Ollama Download Page"))
             {
                 OllamaSetupHelper.OpenInBrowser("https://ollama.com/download");
                 _transcript.Append(_html.Dim("Install Ollama, then pick Retry."));
@@ -262,12 +276,13 @@ private async Task RunSetupWizardAsync()
             // empty daemon shouldn't need to know model tags. Sizes and hardware hints let them
             // self-select; free-text entry remains for people who know what they want.
             _transcript.Append(_html.Warn("No models are pulled yet — let's get you one."));
-            _transcript.Append(_html.Dim("Cloud models run on ollama.com's servers: more capable, no GPU needed, free with a sign-in. "
-                                       + "Local models run privately on your own hardware — bigger is smarter but needs more memory."));
+            _transcript.Append(_html.Dim("Cloud models run on ollama.com's servers: more capable, no GPU needed, but they require an "
+                                       + "ollama.com account with an active cloud subscription. "
+                                       + "Local models run privately on your own hardware, free — bigger is smarter but needs more memory."));
 
             var starter = await WizardSelectAsync("Pick a starter model to install:", new List<ApprovalOption>
             {
-                new($"Cloud — {MandoCodeConfig.DefaultCloudModel}   (best quality, no GPU needed)", ApprovalOptionKind.Proceed),
+                new($"Cloud — {MandoCodeConfig.DefaultCloudModel}   (best quality, no GPU needed, ollama.com subscription)", ApprovalOptionKind.Proceed),
                 new("Local — qwen2.5:1.5b   (~1 GB · fast on any laptop)", ApprovalOptionKind.Proceed),
                 new("Local — qwen3:4b   (~2.6 GB · balanced day-to-day)", ApprovalOptionKind.Proceed),
                 new("Local — qwen2.5-coder:7b   (~4.7 GB · code-focused, 6 GB+ VRAM)", ApprovalOptionKind.Proceed),
@@ -283,7 +298,7 @@ private async Task RunSetupWizardAsync()
                 var auth = await OllamaSetupHelper.CheckCloudSignInAsync(_config.OllamaEndpoint);
                 if (auth != OllamaSetupHelper.CloudAuthState.SignedIn)
                 {
-                    _transcript.Append(_html.Info("Cloud models need a free ollama.com account."));
+                    _transcript.Append(_html.Info("Cloud models need an ollama.com account with an active cloud subscription — without one, cloud requests fail with 403 Forbidden."));
                     if (await WizardConfirmAsync("Sign in to Ollama cloud now?", defaultYes: true))
                         await RunCloudSigninWalkthroughAsync();
                 }
diff --git a/src/MandoCode.Desktop/ViewModels/ChatController.cs b/src/MandoCode.Desktop/ViewModels/ChatController.cs
index 155e905..08f9796 100644
--- a/src/MandoCode.Desktop/ViewModels/ChatController.cs
+++ b/src/MandoCode.Desktop/ViewModels/ChatController.cs
@@ -1191,6 +1191,12 @@ private async Task ApplyModelSwitchAsync(string modelTag)
 
         _transcript.Append(_html.StatusChip(modelTag, "now active", "ok"));
 
+        // Selection-time awareness, not just failure-time: cloud models require an active
+        // ollama.com cloud subscription — a signed-in account without one gets 403 Forbidden
+        // on its first message, which reads as the app breaking.
+        if (MandoCodeConfig.IsCloudModel(modelTag))
+            _transcript.Append(_html.Dim("Cloud model — runs on ollama.com's servers and needs an account with an active cloud subscription. Without one, requests return 403 Forbidden."));
+
         // Only mention the cleared context — and offer a snapshot — when there was actually a
         // conversation to clear. Switching an empty chat has nothing to salvage, so stay quiet.
         if (_pending != null)
diff --git a/src/MandoCode.Desktop/ViewModels/ResponseStreamer.cs b/src/MandoCode.Desktop/ViewModels/ResponseStreamer.cs
index 75a2ef1..1f2521f 100644
--- a/src/MandoCode.Desktop/ViewModels/ResponseStreamer.cs
+++ b/src/MandoCode.Desktop/ViewModels/ResponseStreamer.cs
@@ -99,6 +99,14 @@ public async Task<string> StreamAsync(string input, CancellationToken token)
                     // offer the sign-in walkthrough inline instead of making the user type /setup.
                     await On401();
                 }
+                else if (Looks403(responseText))
+                {
+                    // 403 is NOT a sign-in problem — the account is authenticated but has no
+                    // cloud subscription, so the sign-in walkthrough would loop uselessly.
+                    // Name the real cause and the two real exits.
+                    _transcript.Append(_html.Warn("403 Forbidden from the cloud — your ollama.com account is signed in but doesn't have an active cloud subscription."));
+                    _transcript.Append(_html.Dim("Cloud models require a subscription at ollama.com. Or switch to a free local model with /model."));
+                }
 
                 if (_config.EnableTokenTracking)
                 {
@@ -134,4 +142,9 @@ public async Task<string> StreamAsync(string input, CancellationToken token)
     private static bool Looks401(string responseText)
         => !string.IsNullOrEmpty(responseText)
            && responseText.Contains("401 Unauthorized", StringComparison.OrdinalIgnoreCase);
+
+    private static bool Looks403(string responseText)
+        => !string.IsNullOrEmpty(responseText)
+           && responseText.Contains("403", StringComparison.Ordinal)
+           && responseText.Contains("forbidden", StringComparison.OrdinalIgnoreCase);
 }