refactor(ollama)!: remove Ollama provider crate and implementation

Deletes the `owlen-ollama` Cargo.toml and source files, fully removing the Ollama provider from the workspace. This aligns the project with the MCP‑only architecture and eliminates direct provider dependencies.

crates/owlen-cli/src/main.rs

@@ -1,20 +1,23 @@
 //! OWLEN CLI - Chat TUI client
 
+mod cloud;
+
 use anyhow::{anyhow, Result};
 use async_trait::async_trait;
 use clap::{Parser, Subcommand};
+use cloud::{load_runtime_credentials, CloudCommand};
 use owlen_core::config as core_config;
 use owlen_core::{
     config::{Config, McpMode},
     mcp::remote_client::RemoteMcpClient,
     mode::Mode,
     provider::ChatStream,
+    providers::OllamaProvider,
     session::SessionController,
     storage::StorageManager,
     types::{ChatRequest, ChatResponse, Message, ModelInfo},
     Error, Provider,
 };
-use owlen_ollama::OllamaProvider;
 use owlen_tui::tui_controller::{TuiController, TuiRequest};
 use owlen_tui::{config, ui, AppState, ChatApp, Event, EventHandler, SessionEvent};
 use std::borrow::Cow;
@@ -48,6 +51,9 @@ enum OwlenCommand {
     /// Inspect or upgrade configuration files
     #[command(subcommand)]
     Config(ConfigCommand),
+    /// Manage Ollama Cloud credentials
+    #[command(subcommand)]
+    Cloud(CloudCommand),
     /// Show manual steps for updating Owlen to the latest revision
     Upgrade,
 }
@@ -112,8 +118,7 @@ fn build_local_provider(cfg: &Config) -> anyhow::Result<Arc<dyn Provider>> {
     match provider_cfg.provider_type.as_str() {
         "ollama" | "ollama-cloud" => {
             let provider = OllamaProvider::from_config(provider_cfg, Some(&cfg.general))?;
-            let provider: Arc<dyn Provider> = Arc::new(provider);
-            Ok(provider)
+            Ok(Arc::new(provider) as Arc<dyn Provider>)
         }
         other => Err(anyhow::anyhow!(format!(
             "Provider type '{other}' is not supported in legacy/local MCP mode"
@@ -121,9 +126,10 @@ fn build_local_provider(cfg: &Config) -> anyhow::Result<Arc<dyn Provider>> {
     }
 }
 
-fn run_command(command: OwlenCommand) -> Result<()> {
+async fn run_command(command: OwlenCommand) -> Result<()> {
     match command {
         OwlenCommand::Config(config_cmd) => run_config_command(config_cmd),
+        OwlenCommand::Cloud(cloud_cmd) => cloud::run_cloud_command(cloud_cmd).await,
         OwlenCommand::Upgrade => {
             println!("To update Owlen from source:\n  git pull\n  cargo install --path crates/owlen-cli --force");
             println!(
@@ -163,16 +169,34 @@ fn run_config_doctor() -> Result<()> {
         changes.push("default provider missing; reset to 'ollama'".to_string());
     }
 
+    if let Some(mut legacy) = config.providers.remove("ollama-cloud") {
+        legacy.provider_type = "ollama".to_string();
+        use std::collections::hash_map::Entry;
+        match config.providers.entry("ollama".to_string()) {
+            Entry::Occupied(mut existing) => {
+                let entry = existing.get_mut();
+                if entry.api_key.is_none() {
+                    entry.api_key = legacy.api_key.take();
+                }
+                if entry.base_url.is_none() && legacy.base_url.is_some() {
+                    entry.base_url = legacy.base_url.take();
+                }
+                entry.extra.extend(legacy.extra);
+            }
+            Entry::Vacant(slot) => {
+                slot.insert(legacy);
+            }
+        }
+        changes.push(
+            "migrated legacy 'ollama-cloud' provider into unified 'ollama' entry".to_string(),
+        );
+    }
+
     if !config.providers.contains_key("ollama") {
         core_config::ensure_provider_config(&mut config, "ollama");
         changes.push("added default ollama provider configuration".to_string());
     }
 
-    if !config.providers.contains_key("ollama-cloud") {
-        core_config::ensure_provider_config(&mut config, "ollama-cloud");
-        changes.push("added default ollama-cloud provider configuration".to_string());
-    }
-
     match config.mcp.mode {
         McpMode::Legacy => {
             config.mcp.mode = McpMode::LocalOnly;
@@ -329,7 +353,7 @@ async fn main() -> Result<()> {
     // Parse command-line arguments
     let Args { code, command } = Args::parse();
     if let Some(command) = command {
-        return run_command(command);
+        return run_command(command).await;
     }
     let initial_mode = if code { Mode::Code } else { Mode::Chat };
 
@@ -339,8 +363,6 @@ async fn main() -> Result<()> {
     let color_support = detect_terminal_color_support();
     // Load configuration (or fall back to defaults) for the session controller.
     let mut cfg = config::try_load_config().unwrap_or_default();
-    // Disable encryption for CLI to avoid password prompts in this environment.
-    cfg.privacy.encrypt_local_data = false;
     if let Some(previous_theme) = apply_terminal_theme(&mut cfg, &color_support) {
         let term_label = match &color_support {
             TerminalColorSupport::Limited { term } => Cow::from(term.as_str()),
@@ -357,6 +379,8 @@ async fn main() -> Result<()> {
         );
     }
     cfg.validate()?;
+    let storage = Arc::new(StorageManager::new().await?);
+    load_runtime_credentials(&mut cfg, storage.clone()).await?;
 
     let (tui_tx, _tui_rx) = mpsc::unbounded_channel::<TuiRequest>();
     let tui_controller = Arc::new(TuiController::new(tui_tx));
@@ -387,7 +411,6 @@ async fn main() -> Result<()> {
         }
     };
 
-    let storage = Arc::new(StorageManager::new().await?);
     let controller =
         SessionController::new(provider, cfg, storage.clone(), tui_controller, false).await?;
     let (mut app, mut session_rx) = ChatApp::new(controller).await?;