@undefineds.co/models 0.2.34 → 0.2.37

package/README.md

@@ -17,8 +17,6 @@ yarn workspace @undefineds.co/models test
 ```ts
 import {
   UDFS,
-  XPOD_AI,
-  XPOD_CREDENTIAL,
   agentResource,
   aiModelResource,
   aiProviderResource,
@@ -53,13 +51,6 @@ https://undefineds.co/ns#
 
 Use `udfs:` terms in models-level RDF contracts.
 
-AI service catalog resources currently use the Xpod AI vocabularies:
-
-```text
-https://vocab.xpod.dev/ai#
-https://vocab.xpod.dev/credential#
-```
-
 ## Core Runtime Semantics
 
 The shared chat/runtime model is:
@@ -169,16 +160,16 @@ AI Secretary has both:
 ```text
 Contact
   contactType: agent
-  entityUri: Agent profile URI
+  entity: Agent context-root URI
 
 Agent
-  home: /.data/agents/secretary/
-  profile: /.data/agents/secretary/profile.ttl
+  root: /agents/__secretary__/
+  meta: /agents/__secretary__/.meta
 ```
 
 External people, services, or bots may appear as Contacts without being LinX
-Agents. If something is modeled as an executable LinX Agent, it must have an
-Agent home container.
+Agents. If something is modeled as an executable LinX Agent, the Agent resource
+identity is the context-root container itself.
 
 ## Resource Ownership
 
@@ -212,7 +203,7 @@ Representative paths:
 /.data/chat/{chatId}/index.ttl#this
 /.data/chat/{chatId}/index.ttl#{threadId}
 /.data/chat/{chatId}/{yyyy}/{MM}/{dd}/messages.ttl#{messageId}
-/.data/agents/{agentId}/profile.ttl
+/agents/{agentId}/
 /.data/sessions/{yyyy}/{MM}/{dd}/{sessionId}.ttl
 /settings/providers/{providerId}.ttl
 /settings/providers/{providerId}.ttl#{modelId}
@@ -221,7 +212,13 @@ Representative paths:
 
 Schema fields that are RDF relations should store resource URIs, not hidden
 `xxxId` foreign keys. Short ids are acceptable at repository/helper boundaries
-when the helper derives the canonical URI internally.
+when the helper derives the canonical URI internally. If a fact must be
+queried, synced, approved, audited, or used to reconstruct shared state, model
+it as an explicit field or URI relation instead of hiding it in `metadata`.
+`metadata` is only for opaque protocol ids, local cache keys, UI state,
+compatibility data, and non-structural context. Prefer semantic relation names
+such as `chat`, `thread`, `message`, `task`, `delivery`, `session`,
+`workspace`, `source`, and `trigger`.
 
 ## Design Rules
 

package/dist/agent.repository.d.ts

@@ -3,12 +3,24 @@ export declare const agentRepository: import("@undefineds.co/drizzle-solid/dist/
     name: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, false>;
     description: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     avatarUrl: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    root: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    identity: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    hasSkill: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"array", "uri", false, false>;
     instructions: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     provider: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     model: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    backend: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    runtime: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    transport: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    endpoint: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    credentialSource: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     temperature: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"integer", null, false, true>;
     tools: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"array", "string", false, false>;
     contextRound: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"integer", null, false, true>;
+    authorityPolicy: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"object", null, false, false>;
+    toolPolicy: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"object", null, false, false>;
+    metadata: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"object", null, false, false>;
+    enabled: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"boolean", null, false, true>;
     ttsModel: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     videoModel: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     createdAt: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"datetime", null, true, true>;
@@ -19,12 +31,24 @@ export declare const agentRepository: import("@undefineds.co/drizzle-solid/dist/
     name: string;
     description: string;
     avatarUrl: string;
+    root: string;
+    identity: string;
+    hasSkill: string[];
     instructions: string;
     provider: string;
     model: string;
+    backend: string;
+    runtime: string;
+    transport: string;
+    endpoint: string;
+    credentialSource: string;
     temperature: number;
     tools: string[];
     contextRound: number;
+    authorityPolicy: Record<string, unknown>;
+    toolPolicy: Record<string, unknown>;
+    metadata: Record<string, unknown>;
+    enabled: boolean;
     ttsModel: string;
     videoModel: string;
     createdAt: Date;
@@ -35,12 +59,24 @@ export declare const agentRepository: import("@undefineds.co/drizzle-solid/dist/
     id?: string | undefined;
     description?: string | undefined;
     avatarUrl?: string | undefined;
+    root?: string | undefined;
+    identity?: string | undefined;
+    hasSkill?: string[] | undefined;
     instructions?: string | undefined;
     provider?: string | undefined;
     model?: string | undefined;
+    backend?: string | undefined;
+    runtime?: string | undefined;
+    transport?: string | undefined;
+    endpoint?: string | undefined;
+    credentialSource?: string | undefined;
     temperature?: number | undefined;
     tools?: string[] | undefined;
     contextRound?: number | undefined;
+    authorityPolicy?: Record<string, unknown> | undefined;
+    toolPolicy?: Record<string, unknown> | undefined;
+    metadata?: Record<string, unknown> | undefined;
+    enabled?: boolean | undefined;
     ttsModel?: string | undefined;
     videoModel?: string | undefined;
     createdAt?: Date | undefined;
@@ -51,12 +87,24 @@ export declare const agentRepository: import("@undefineds.co/drizzle-solid/dist/
     name?: string | undefined;
     description?: string | null | undefined;
     avatarUrl?: string | null | undefined;
+    root?: string | null | undefined;
+    identity?: string | null | undefined;
+    hasSkill?: string[] | null | undefined;
     instructions?: string | null | undefined;
     provider?: string | null | undefined;
     model?: string | null | undefined;
+    backend?: string | null | undefined;
+    runtime?: string | null | undefined;
+    transport?: string | null | undefined;
+    endpoint?: string | null | undefined;
+    credentialSource?: string | null | undefined;
     temperature?: number | null | undefined;
     tools?: string[] | null | undefined;
     contextRound?: number | null | undefined;
+    authorityPolicy?: Record<string, unknown> | null | undefined;
+    toolPolicy?: Record<string, unknown> | null | undefined;
+    metadata?: Record<string, unknown> | null | undefined;
+    enabled?: boolean | null | undefined;
     ttsModel?: string | null | undefined;
     videoModel?: string | null | undefined;
     createdAt?: Date | undefined;

package/dist/agent.repository.js

@@ -2,6 +2,6 @@ import { definePodRepository } from './repository.js';
 import { agentResource } from './agent.schema.js';
 export const agentRepository = definePodRepository({
     namespace: 'agent',
-    table: agentResource,
+    resource: agentResource,
     searchableFields: ['name', 'description', 'instructions'],
 });

package/dist/agent.schema.d.ts

@@ -3,12 +3,24 @@ export declare const agentResource: import("@undefineds.co/drizzle-solid/dist/co
     name: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, false>;
     description: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     avatarUrl: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    root: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    identity: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    hasSkill: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"array", "uri", false, false>;
     instructions: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     provider: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     model: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    backend: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    runtime: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    transport: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    endpoint: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    credentialSource: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     temperature: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"integer", null, false, true>;
     tools: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"array", "string", false, false>;
     contextRound: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"integer", null, false, true>;
+    authorityPolicy: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"object", null, false, false>;
+    toolPolicy: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"object", null, false, false>;
+    metadata: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"object", null, false, false>;
+    enabled: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"boolean", null, false, true>;
     ttsModel: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     videoModel: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     createdAt: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"datetime", null, true, true>;
@@ -20,12 +32,24 @@ export declare const agentTable: import("@undefineds.co/drizzle-solid/dist/core/
     name: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, false>;
     description: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     avatarUrl: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    root: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    identity: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    hasSkill: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"array", "uri", false, false>;
     instructions: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     provider: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     model: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    backend: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    runtime: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    transport: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    endpoint: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    credentialSource: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     temperature: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"integer", null, false, true>;
     tools: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"array", "string", false, false>;
     contextRound: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"integer", null, false, true>;
+    authorityPolicy: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"object", null, false, false>;
+    toolPolicy: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"object", null, false, false>;
+    metadata: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"object", null, false, false>;
+    enabled: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"boolean", null, false, true>;
     ttsModel: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     videoModel: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     createdAt: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"datetime", null, true, true>;

package/dist/agent.schema.js

@@ -1,27 +1,38 @@
-import { podTable, string, integer, timestamp, text, real, uri, id } from "@undefineds.co/drizzle-solid";
+import { boolean, object, podTable, string, integer, timestamp, text, real, uri, id } from "@undefineds.co/drizzle-solid";
 import { UDFS, DCTerms, FOAF, VCARD } from "./namespaces.js";
 export const agentResource = podTable("agent", {
-    id: id("id"),
+    id: id("id").default("{key}/"),
     name: string("name").predicate(FOAF.name).notNull(),
     description: text("description").predicate(DCTerms.description),
     avatarUrl: uri("avatarUrl").predicate(VCARD.hasPhoto),
+    root: uri("root").predicate(UDFS.root),
+    identity: uri("identity").predicate(UDFS.webId),
+    hasSkill: uri("hasSkill").array().predicate(UDFS.hasSkill),
     instructions: text("instructions").predicate(UDFS.systemMessage),
     provider: string("provider").predicate(UDFS.provider),
     model: string("model").predicate(UDFS.model),
+    backend: string("backend").predicate(UDFS.backend),
+    runtime: string("runtime").predicate(UDFS.runtime),
+    transport: string("transport").predicate(UDFS.transport),
+    endpoint: uri("endpoint").predicate(UDFS.endpoint),
+    credentialSource: string("credentialSource").predicate(UDFS.credentialSource),
     temperature: real("temperature").predicate(UDFS.temperature).default(0.7),
     tools: text("tools").array().predicate(UDFS.tools),
     contextRound: integer("contextRound").predicate(UDFS.contextRound).default(4),
+    authorityPolicy: object("authorityPolicy").predicate(UDFS.authorityPolicy),
+    toolPolicy: object("toolPolicy").predicate(UDFS.toolPolicy),
+    metadata: object("metadata").predicate(UDFS.metadata),
+    enabled: boolean("enabled").predicate(UDFS.enabled).default(true),
     ttsModel: string("ttsModel").predicate(UDFS.ttsModel),
     videoModel: string("videoModel").predicate(UDFS.videoModel),
     createdAt: timestamp("createdAt").predicate(DCTerms.created).notNull().defaultNow(),
     updatedAt: timestamp("updatedAt").predicate(DCTerms.modified).notNull().defaultNow(),
     deletedAt: timestamp("deletedAt").predicate(UDFS.deletedAt),
 }, {
-    base: '/.data/agents/',
-    sparqlEndpoint: '/.data/agents/-/sparql',
+    base: '/agents/',
+    sparqlEndpoint: '/agents/-/sparql',
     type: FOAF.Agent,
     namespace: UDFS,
-    subjectTemplate: '{id}.ttl',
 });
 // Compatibility alias. New model code should prefer `agentResource`.
 export const agentTable = agentResource;

package/dist/ai-config/index.d.ts

@@ -1,5 +1,5 @@
 import type { AIModelInsert, AIModelRow } from '../ai-model.schema';
-import type { AIProviderInsert, AIProviderRow } from '../ai-provider.schema';
+import { type AIProviderInsert, type AIProviderRow } from '../ai-provider.schema';
 import type { CredentialInsert, CredentialRow } from '../credential.schema';
 export interface AIConfigProviderCatalogEntry {
     id: string;
@@ -30,6 +30,11 @@ export interface AIConfigUpdate {
     enabled?: boolean;
     apiKey?: string;
     baseUrl?: string;
+    supportsBackend?: string;
+    rotationPolicy?: string;
+    credentialId?: string;
+    credentialLabel?: string;
+    credentialBaseUrl?: string;
     models?: AIConfigModel[];
 }
 export interface BuildAIConfigProviderStateMapOptions {
@@ -49,6 +54,9 @@ export interface AIConfigCredentialSelection {
     proxyUrl?: string;
     isDefault: boolean;
 }
+export interface AIConfigBackendCredentialSelection extends AIConfigCredentialSelection {
+    backend: string;
+}
 export interface AIConfigMutationPlan {
     providerId: string;
     providerPayload?: AIProviderInsert;
@@ -67,6 +75,15 @@ export declare const LINX_LITE_MODEL_ID = "linx-lite";
 export declare const LINX_MODEL_ID = "linx";
 export declare const DEFAULT_LINX_MODEL_ID = "linx-lite";
 export declare const UNDEFINEDS_AI_MODEL_IDS: readonly ["linx-lite", "linx"];
+interface AIConfigRepositoryDb {
+    select(): {
+        from(resource: unknown): {
+            execute(): Promise<unknown[]>;
+        };
+    };
+    findById<T = unknown>(resource: unknown, id: string): Promise<T | null>;
+    updateById(resource: unknown, id: string, data: Record<string, unknown>): Promise<unknown>;
+}
 export declare function getAIConfigProviderCatalog(): readonly AIConfigProviderCatalogEntry[];
 export declare function getAIConfigProviderMetadata(providerId: string): AIConfigProviderCatalogEntry;
 export declare function normalizeAIConfigResourceId(raw?: string | null): string;
@@ -74,11 +91,19 @@ export declare function normalizeAIConfigModelId(raw?: string | null, providerId
 export declare function normalizeAIConfigProviderId(raw?: string | null): string;
 export declare function sameAIConfigProviderFamily(left?: string | null, right?: string | null): boolean;
 export declare function getAIConfigProviderFamilyIds(providerId: string): string[];
+export declare function getAIConfigProviderIdsForBackend(backend: string): string[];
 export declare function getAIConfigDefaultBaseUrl(providerId: string): string | undefined;
 export declare function getDefaultAIConfigCredentialId(providerId: string): string;
 export declare function aiConfigProviderRef(providerId: string): string;
 export declare function aiConfigModelRef(providerId: string, modelId?: string): string;
-export declare function selectAIConfigCredential(providerId: string, credentialRows: Array<Partial<CredentialRow> & Record<string, unknown>>, providerRows?: Array<Partial<AIProviderRow> & Record<string, unknown>>): AIConfigCredentialSelection | undefined;
+export declare function selectAIConfigCredential(providerId: string, credentialRows: Array<Partial<CredentialRow> & Record<string, unknown>>, providerRows?: Array<Partial<AIProviderRow> & Record<string, unknown>>, options?: {
+    rotationPolicy?: string;
+}): AIConfigCredentialSelection | undefined;
+export declare function selectAIConfigCredentialForBackend(backend: string, credentialRows: Array<Partial<CredentialRow> & Record<string, unknown>>, providerRows?: Array<Partial<AIProviderRow> & Record<string, unknown>>): AIConfigBackendCredentialSelection | undefined;
+export declare const aiConfigRepository: {
+    loadCredentialForBackend(db: AIConfigRepositoryDb, backend: string): Promise<AIConfigBackendCredentialSelection | undefined>;
+    markCredentialUsed(db: AIConfigRepositoryDb, selection: Pick<AIConfigCredentialSelection, "credentialId"> | undefined, usedAt?: Date): Promise<void>;
+};
 export declare function aiConfigProviderUri(providerId: string): string;
 export declare function aiConfigModelUri(modelId: string, providerId?: string): string;
 export declare function buildAIConfigProviderStateMap(options: BuildAIConfigProviderStateMapOptions): Record<string, AIConfigProviderState>;
@@ -93,3 +118,4 @@ export declare function buildAIConfigDisconnectPlan(input: {
     providerId: string;
     currentCredentialRows: Array<Partial<CredentialRow> & Record<string, unknown>>;
 }): AIConfigDisconnectPlan;
+export {};

package/dist/ai-config/index.js

@@ -1,3 +1,5 @@
+import { aiProviderResource } from '../ai-provider.schema.js';
+import { credentialResource } from '../credential.schema.js';
 export const UNDEFINEDS_AI_PROVIDER_ID = 'undefineds';
 export const UNDEFINEDS_AI_PROVIDER_DISPLAY_NAME = 'undefineds';
 export const UNDEFINEDS_AI_BASE_URL = 'https://api.undefineds.co/v1';
@@ -126,6 +128,34 @@ function normalizeOptionalTimestamp(value) {
 function normalizeOptionalInteger(value) {
     return typeof value === 'number' && Number.isFinite(value) ? value : 0;
 }
+function normalizeBackendId(value) {
+    return normalizeText(String(value ?? ''));
+}
+function normalizeRotationPolicy(value) {
+    const normalized = normalizeOptionalText(value)?.toLowerCase();
+    return normalized === 'round_robin' || normalized === 'round-robin' ? 'round_robin' : 'default';
+}
+function parseBackendList(value) {
+    if (Array.isArray(value)) {
+        return value.flatMap(parseBackendList);
+    }
+    if (typeof value !== 'string') {
+        return [];
+    }
+    return value
+        .split(/[\s,;|]+/u)
+        .map(normalizeBackendId)
+        .filter(Boolean);
+}
+function uniqueStrings(values) {
+    return Array.from(new Set(values.filter(Boolean)));
+}
+function aiConfigProviderSupportsBackend(row, backend) {
+    const normalizedBackend = normalizeBackendId(backend);
+    if (!normalizedBackend)
+        return false;
+    return parseBackendList(row.supportsBackend).includes(normalizedBackend);
+}
 export function getAIConfigProviderCatalog() {
     return AI_CONFIG_PROVIDER_CATALOG;
 }
@@ -202,6 +232,9 @@ export function getAIConfigProviderFamilyIds(providerId) {
     const metadata = getAIConfigProviderMetadata(providerId);
     return [metadata.id, ...(metadata.aliases ?? [])];
 }
+export function getAIConfigProviderIdsForBackend(backend) {
+    return getAIConfigProviderFamilyIds(backend);
+}
 export function getAIConfigDefaultBaseUrl(providerId) {
     return getAIConfigProviderMetadata(providerId).defaultBaseUrl;
 }
@@ -220,7 +253,7 @@ export function aiConfigModelRef(providerId, modelId) {
     const model = normalizeAIConfigModelStorageId(modelId, provider);
     return provider && model ? `/settings/providers/${provider}.ttl#${model}` : model;
 }
-export function selectAIConfigCredential(providerId, credentialRows, providerRows = []) {
+export function selectAIConfigCredential(providerId, credentialRows, providerRows = [], options = {}) {
     const provider = normalizeAIConfigProviderId(providerId);
     if (!provider)
         return undefined;
@@ -245,9 +278,12 @@ export function selectAIConfigCredential(providerId, credentialRows, providerRow
         return normalizeAIConfigResourceId(String(left.id ?? left['@id'] ?? ''))
             .localeCompare(normalizeAIConfigResourceId(String(right.id ?? right['@id'] ?? '')));
     };
-    const defaults = candidates.filter((row) => normalizeOptionalBoolean(row.isDefault));
-    const credential = [...(defaults.length > 0 ? defaults : candidates)].sort(sortByRotation)[0];
     const providerRow = providerRows.find((row) => sameAIConfigProviderFamily(aiConfigProviderRowId(row), provider));
+    const rotationPolicy = normalizeRotationPolicy(options.rotationPolicy ?? providerRow?.rotationPolicy);
+    const defaults = rotationPolicy === 'round_robin'
+        ? []
+        : candidates.filter((row) => normalizeOptionalBoolean(row.isDefault));
+    const credential = [...(defaults.length > 0 ? defaults : candidates)].sort(sortByRotation)[0];
     const apiKey = normalizeOptionalText(credential.apiKey);
     if (!apiKey)
         return undefined;
@@ -264,6 +300,91 @@ export function selectAIConfigCredential(providerId, credentialRows, providerRow
         isDefault: normalizeOptionalBoolean(credential.isDefault),
     };
 }
+export function selectAIConfigCredentialForBackend(backend, credentialRows, providerRows = []) {
+    const normalizedBackend = normalizeBackendId(backend);
+    if (!normalizedBackend)
+        return undefined;
+    const explicitProviderIds = providerRows
+        .filter((row) => aiConfigProviderSupportsBackend(row, normalizedBackend))
+        .map(aiConfigProviderRowId)
+        .filter(Boolean);
+    const familyProviderIds = getAIConfigProviderIdsForBackend(normalizedBackend);
+    const providerIds = uniqueStrings([...explicitProviderIds, ...familyProviderIds]);
+    for (const providerId of providerIds) {
+        const providerRow = providerRows.find((row) => sameAIConfigProviderFamily(aiConfigProviderRowId(row), providerId));
+        const selected = selectAIConfigCredential(providerId, credentialRows, providerRows, {
+            rotationPolicy: normalizeOptionalText(providerRow?.rotationPolicy),
+        });
+        if (!selected)
+            continue;
+        return {
+            ...selected,
+            backend: normalizedBackend,
+        };
+    }
+    return undefined;
+}
+async function listAIConfigCredentialRows(db) {
+    return await db.select().from(credentialResource).execute();
+}
+async function findAIConfigProviderRows(db, providerIds) {
+    const rows = [];
+    const seen = new Set();
+    for (const providerId of providerIds) {
+        for (const candidate of aiConfigProviderIdCandidates(providerId)) {
+            if (!candidate || seen.has(candidate))
+                continue;
+            seen.add(candidate);
+            const row = await db.findById(aiProviderResource, candidate)
+                .catch((error) => {
+                if (isMissingAIConfigExactReadError(error)) {
+                    return null;
+                }
+                throw error;
+            });
+            if (row) {
+                rows.push(row);
+                break;
+            }
+        }
+    }
+    return rows;
+}
+function collectAIConfigProviderIdsForBackend(backend, credentialRows) {
+    const ids = new Set(getAIConfigProviderIdsForBackend(backend));
+    for (const row of credentialRows) {
+        const providerId = aiConfigCredentialProviderId(row);
+        if (providerId)
+            ids.add(providerId);
+    }
+    return Array.from(ids);
+}
+function aiConfigProviderIdCandidates(providerId) {
+    const normalized = normalizeAIConfigResourceId(providerId) || providerId;
+    return uniqueStrings([
+        normalized,
+        `${normalized}.ttl`,
+    ]);
+}
+function isMissingAIConfigExactReadError(error) {
+    if (!error || typeof error !== 'object') {
+        return false;
+    }
+    const message = 'message' in error && typeof error.message === 'string' ? error.message : '';
+    return /404|not found|missing/i.test(message);
+}
+export const aiConfigRepository = {
+    async loadCredentialForBackend(db, backend) {
+        const credentialRows = await listAIConfigCredentialRows(db);
+        const providerRows = await findAIConfigProviderRows(db, collectAIConfigProviderIdsForBackend(backend, credentialRows));
+        return selectAIConfigCredentialForBackend(backend, credentialRows, providerRows);
+    },
+    async markCredentialUsed(db, selection, usedAt = new Date()) {
+        if (!selection?.credentialId)
+            return;
+        await db.updateById(credentialResource, selection.credentialId, { lastUsedAt: usedAt });
+    },
+};
 // Compatibility aliases for older app/CLI call sites. New code should prefer
 // `aiConfigProviderRef` / `aiConfigModelRef`, which match current resource schemas.
 export function aiConfigProviderUri(providerId) {
@@ -356,15 +477,29 @@ export function buildAIConfigMutationPlan(input) {
     const providerId = normalizeAIConfigProviderId(input.providerId);
     const metadata = getAIConfigProviderMetadata(providerId);
     const existingProvider = input.currentProviderRows.find((row) => sameAIConfigProviderFamily(aiConfigProviderRowId(row), providerId));
-    const existingCredential = selectAIConfigCredential(providerId, input.currentCredentialRows, input.currentProviderRows)?.credential
+    const existingCredential = (input.updates.credentialId
+        ? input.currentCredentialRows.find((row) => normalizeAIConfigResourceId(String(row.id ?? row['@id'] ?? '')) === normalizeAIConfigResourceId(input.updates.credentialId))
+        : undefined)
+        ?? selectAIConfigCredential(providerId, input.currentCredentialRows, input.currentProviderRows)?.credential
         ?? input.currentCredentialRows.find((row) => sameAIConfigProviderFamily(aiConfigCredentialProviderId(row), providerId));
     const existingModels = input.currentModelRows.filter((row) => sameAIConfigProviderFamily(aiConfigModelProviderId(row), providerId));
-    const hasConfigUpdate = input.updates.enabled !== undefined || input.updates.apiKey !== undefined || input.updates.baseUrl !== undefined;
+    const hasProviderUpdate = input.updates.enabled !== undefined ||
+        input.updates.apiKey !== undefined ||
+        input.updates.baseUrl !== undefined ||
+        input.updates.supportsBackend !== undefined ||
+        input.updates.rotationPolicy !== undefined ||
+        input.updates.models !== undefined;
+    const hasCredentialUpdate = input.updates.enabled !== undefined ||
+        input.updates.apiKey !== undefined ||
+        input.updates.credentialId !== undefined ||
+        input.updates.credentialLabel !== undefined ||
+        input.updates.credentialBaseUrl !== undefined ||
+        input.updates.baseUrl !== undefined;
     let providerPayload;
     let credentialPayload;
     const modelUpserts = [];
     const modelDeleteIds = [];
-    if (hasConfigUpdate || input.updates.models !== undefined) {
+    if (hasProviderUpdate) {
         const selectedModelId = input.updates.models
             ? preferredSelectedModelId(input.updates.models)
             : normalizeAIConfigModelStorageId(typeof existingProvider?.hasModel === 'string' ? existingProvider.hasModel : '', providerId);
@@ -375,11 +510,16 @@ export function buildAIConfigMutationPlan(input) {
                 metadata.defaultBaseUrl,
             proxyUrl: typeof existingProvider?.proxyUrl === 'string' ? existingProvider.proxyUrl : undefined,
             hasModel: selectedModelId ? aiConfigModelRef(providerId, selectedModelId) : undefined,
+            supportsBackend: input.updates.supportsBackend ??
+                (typeof existingProvider?.supportsBackend === 'string' ? existingProvider.supportsBackend : undefined),
+            rotationPolicy: input.updates.rotationPolicy ??
+                (typeof existingProvider?.rotationPolicy === 'string' ? existingProvider.rotationPolicy : undefined),
         };
     }
-    if (hasConfigUpdate) {
+    if (hasCredentialUpdate) {
         credentialPayload = {
-            id: normalizeAIConfigResourceId(typeof existingCredential?.id === 'string' ? existingCredential.id : '') ||
+            id: normalizeAIConfigResourceId(input.updates.credentialId) ||
+                normalizeAIConfigResourceId(typeof existingCredential?.id === 'string' ? existingCredential.id : '') ||
                 getDefaultAIConfigCredentialId(providerId),
             provider: aiConfigProviderRef(providerId),
             service: typeof existingCredential?.service === 'string' && existingCredential.service ? existingCredential.service : 'ai',
@@ -392,11 +532,12 @@ export function buildAIConfigMutationPlan(input) {
                     : 'active',
             apiKey: input.updates.apiKey ??
                 (typeof existingCredential?.apiKey === 'string' ? existingCredential.apiKey : undefined),
-            baseUrl: input.updates.baseUrl ??
-                (typeof existingCredential?.baseUrl === 'string' ? existingCredential.baseUrl : undefined),
-            label: typeof existingCredential?.label === 'string' && existingCredential.label
-                ? existingCredential.label
-                : `${metadata.displayName} Key`,
+            baseUrl: input.updates.credentialBaseUrl ??
+                (input.updates.baseUrl !== undefined ? undefined : typeof existingCredential?.baseUrl === 'string' ? existingCredential.baseUrl : undefined),
+            label: input.updates.credentialLabel ??
+                (typeof existingCredential?.label === 'string' && existingCredential.label
+                    ? existingCredential.label
+                    : `${metadata.displayName} Key`),
             isDefault: existingCredential?.isDefault === undefined ? true : Boolean(existingCredential.isDefault),
         };
     }

package/dist/ai-model.schema.js

@@ -1,20 +1,19 @@
 import { id, integer, podTable, string, timestamp, uri } from "@undefineds.co/drizzle-solid";
 import { aiProviderResource } from "./ai-provider.schema.js";
-import { XPOD_AI } from "./namespaces.js";
+import { UDFS } from "./namespaces.js";
 export const aiModelResource = podTable("aiModel", {
-    id: id("id"),
-    displayName: string("displayName").predicate(XPOD_AI.displayName),
-    modelType: string("modelType").predicate(XPOD_AI.modelType).default("chat"),
-    isProvidedBy: uri("isProvidedBy").predicate(XPOD_AI.isProvidedBy).link(aiProviderResource),
-    dimension: integer("dimension").predicate(XPOD_AI.dimension),
-    status: string("status").predicate(XPOD_AI.status).default("active"),
-    createdAt: timestamp("createdAt").predicate(XPOD_AI.createdAt).notNull().defaultNow(),
-    updatedAt: timestamp("updatedAt").predicate(XPOD_AI.updatedAt).notNull().defaultNow(),
+    id: id("id").default("{isProvidedBy.doc}#{key}"),
+    displayName: string("displayName").predicate(UDFS.displayName),
+    modelType: string("modelType").predicate(UDFS.modelType).default("chat"),
+    isProvidedBy: uri("isProvidedBy").predicate(UDFS.isProvidedBy).link(aiProviderResource),
+    dimension: integer("dimension").predicate(UDFS.dimension),
+    status: string("status").predicate(UDFS.status).default("active"),
+    createdAt: timestamp("createdAt").predicate(UDFS.createdAt).notNull().defaultNow(),
+    updatedAt: timestamp("updatedAt").predicate(UDFS.updatedAt).notNull().defaultNow(),
 }, {
     base: "/settings/providers/",
-    type: XPOD_AI.Model,
-    namespace: XPOD_AI,
-    subjectTemplate: "{isProvidedBy|id}.ttl#{id}",
+    type: UDFS.Model,
+    namespace: UDFS,
 });
 // Compatibility alias. New model code should prefer `aiModelResource`.
 export const aiModelTable = aiModelResource;

package/dist/ai-provider.schema.d.ts

@@ -5,6 +5,8 @@ export declare const aiProviderResource: import("@undefineds.co/drizzle-solid/di
     proxyUrl: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     hasModel: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
     defaultModel: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    supportsBackend: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    rotationPolicy: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
 }>>;
 export declare const aiProviderTable: import("@undefineds.co/drizzle-solid/dist/core/schema").PodTableWithColumns<import("@undefineds.co/drizzle-solid/dist/core/schema").ResolvedColumns<{
     id: import("@undefineds.co/drizzle-solid/dist/core/schema").PodStringColumn<false, false>;
@@ -13,6 +15,8 @@ export declare const aiProviderTable: import("@undefineds.co/drizzle-solid/dist/
     proxyUrl: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     hasModel: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
     defaultModel: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
+    supportsBackend: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    rotationPolicy: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
 }>>;
 export type AIProviderRow = typeof aiProviderResource.$inferSelect;
 export type AIProviderInsert = typeof aiProviderResource.$inferInsert;