@undefineds.co/xpod 0.4.10 → 0.4.12

package/dist/runtime/upgrade/WebSocketFrames.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Minimal RFC 6455 frame codec used by the gateway's native (Bun) WebSocket
+ * upgrade relay.
+ *
+ * The gateway only needs it on runtimes whose HTTP server cannot hand the raw
+ * upgraded socket back to JavaScript (see `BunNativeUpgradeRelay`): there the
+ * client side is a native WebSocket (message level), while the upstream side is
+ * a raw socket, so frames have to be decoded/encoded in between.
+ *
+ * The codec deliberately implements a single, predictable flavour of the
+ * protocol: no extensions (the relay never offers `permessage-deflate`), no
+ * fragmentation on the outbound path (one frame per message) and a bounded
+ * inbound message size.
+ */
+export declare const WS_OPCODE: {
+    readonly continuation: 0;
+    readonly text: 1;
+    readonly binary: 2;
+    readonly close: 8;
+    readonly ping: 9;
+    readonly pong: 10;
+};
+export type WebSocketFrameOpcode = typeof WS_OPCODE[keyof typeof WS_OPCODE];
+/** Close code used when the peer violates the protocol. */
+export declare const WS_CLOSE_PROTOCOL_ERROR = 1002;
+/** Close code used when a message exceeds the configured size limit. */
+export declare const WS_CLOSE_MESSAGE_TOO_BIG = 1009;
+export interface EncodeWebSocketFrameOptions {
+    opcode: WebSocketFrameOpcode;
+    /** Client-to-server frames must be masked; server-to-client frames must not. */
+    mask: boolean;
+    /** Deterministic mask key, for tests only. */
+    maskKey?: Buffer;
+}
+export declare function encodeWebSocketFrame(payload: Buffer, options: EncodeWebSocketFrameOptions): Buffer;
+/** Encodes a close frame body (`code` + UTF-8 reason). */
+export declare function encodeWebSocketClosePayload(code: number, reason: string): Buffer;
+export interface WebSocketFrameSink {
+    /** A complete (possibly reassembled) data message. */
+    onMessage(payload: Buffer, isBinary: boolean): void;
+    onPing(payload: Buffer): void;
+    onPong(payload: Buffer): void;
+    onClose(code: number, reason: string): void;
+    /** The peer sent something that violates the protocol; the connection should be closed with 1002. */
+    onProtocolError(reason: string): void;
+}
+export interface WebSocketFrameParserOptions {
+    /** Upper bound for a single (reassembled) message; oversized messages raise a protocol error. */
+    maxMessageBytes?: number;
+}
+export declare class WebSocketFrameParser {
+    private readonly sink;
+    private buffer;
+    private fragmentOpcode;
+    private fragments;
+    private fragmentBytes;
+    private failed;
+    private readonly maxMessageBytes;
+    constructor(sink: WebSocketFrameSink, options?: WebSocketFrameParserOptions);
+    push(chunk: Buffer): void;
+    private fail;
+    /** @returns whether a complete frame was consumed. */
+    private parseFrame;
+    private handleFrame;
+    private appendFragment;
+    private completeMessage;
+}

package/dist/runtime/upgrade/WebSocketFrames.js

@@ -0,0 +1,224 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebSocketFrameParser = exports.WS_CLOSE_MESSAGE_TOO_BIG = exports.WS_CLOSE_PROTOCOL_ERROR = exports.WS_OPCODE = void 0;
+exports.encodeWebSocketFrame = encodeWebSocketFrame;
+exports.encodeWebSocketClosePayload = encodeWebSocketClosePayload;
+const node_crypto_1 = require("node:crypto");
+/**
+ * Minimal RFC 6455 frame codec used by the gateway's native (Bun) WebSocket
+ * upgrade relay.
+ *
+ * The gateway only needs it on runtimes whose HTTP server cannot hand the raw
+ * upgraded socket back to JavaScript (see `BunNativeUpgradeRelay`): there the
+ * client side is a native WebSocket (message level), while the upstream side is
+ * a raw socket, so frames have to be decoded/encoded in between.
+ *
+ * The codec deliberately implements a single, predictable flavour of the
+ * protocol: no extensions (the relay never offers `permessage-deflate`), no
+ * fragmentation on the outbound path (one frame per message) and a bounded
+ * inbound message size.
+ */
+exports.WS_OPCODE = {
+    continuation: 0x0,
+    text: 0x1,
+    binary: 0x2,
+    close: 0x8,
+    ping: 0x9,
+    pong: 0xa,
+};
+/** Close code used when the peer violates the protocol. */
+exports.WS_CLOSE_PROTOCOL_ERROR = 1002;
+/** Close code used when a message exceeds the configured size limit. */
+exports.WS_CLOSE_MESSAGE_TOO_BIG = 1009;
+function encodeWebSocketFrame(payload, options) {
+    const { opcode, mask } = options;
+    const length = payload.length;
+    const lengthBytes = length < 126 ? 1 : length <= 0xffff ? 3 : 9;
+    const maskBytes = mask ? 4 : 0;
+    const frame = Buffer.allocUnsafe(1 + lengthBytes + maskBytes + length);
+    frame[0] = 0x80 | opcode;
+    let offset;
+    if (length < 126) {
+        frame[1] = (mask ? 0x80 : 0) | length;
+        offset = 2;
+    }
+    else if (length <= 0xffff) {
+        frame[1] = (mask ? 0x80 : 0) | 126;
+        frame.writeUInt16BE(length, 2);
+        offset = 4;
+    }
+    else {
+        frame[1] = (mask ? 0x80 : 0) | 127;
+        frame.writeBigUInt64BE(BigInt(length), 2);
+        offset = 10;
+    }
+    if (!mask) {
+        payload.copy(frame, offset);
+        return frame;
+    }
+    const maskKey = options.maskKey ?? (0, node_crypto_1.randomBytes)(4);
+    maskKey.copy(frame, offset);
+    for (let index = 0; index < length; index++) {
+        frame[offset + 4 + index] = payload[index] ^ maskKey[index % 4];
+    }
+    return frame;
+}
+/** Encodes a close frame body (`code` + UTF-8 reason). */
+function encodeWebSocketClosePayload(code, reason) {
+    const reasonBytes = Buffer.from(reason, 'utf8');
+    const payload = Buffer.allocUnsafe(2 + reasonBytes.length);
+    payload.writeUInt16BE(code, 0);
+    reasonBytes.copy(payload, 2);
+    return payload;
+}
+const DEFAULT_MAX_MESSAGE_BYTES = 64 * 1024 * 1024;
+class WebSocketFrameParser {
+    constructor(sink, options = {}) {
+        this.sink = sink;
+        this.buffer = Buffer.alloc(0);
+        this.fragments = [];
+        this.fragmentBytes = 0;
+        this.failed = false;
+        this.maxMessageBytes = options.maxMessageBytes ?? DEFAULT_MAX_MESSAGE_BYTES;
+    }
+    push(chunk) {
+        if (this.failed || chunk.length === 0) {
+            return;
+        }
+        this.buffer = this.buffer.length === 0 ? chunk : Buffer.concat([this.buffer, chunk]);
+        while (!this.failed && this.parseFrame()) {
+            // Keep consuming buffered frames.
+        }
+    }
+    fail(reason) {
+        this.failed = true;
+        this.buffer = Buffer.alloc(0);
+        this.fragments = [];
+        this.fragmentOpcode = undefined;
+        this.sink.onProtocolError(reason);
+    }
+    /** @returns whether a complete frame was consumed. */
+    parseFrame() {
+        const buffer = this.buffer;
+        if (buffer.length < 2) {
+            return false;
+        }
+        const fin = (buffer[0] & 0x80) !== 0;
+        const reserved = buffer[0] & 0x70;
+        const opcode = (buffer[0] & 0x0f);
+        const masked = (buffer[1] & 0x80) !== 0;
+        let payloadLength = buffer[1] & 0x7f;
+        let offset = 2;
+        if (reserved !== 0) {
+            this.fail('reserved frame bits set without a negotiated extension');
+            return false;
+        }
+        if (payloadLength === 126) {
+            if (buffer.length < offset + 2) {
+                return false;
+            }
+            payloadLength = buffer.readUInt16BE(offset);
+            offset += 2;
+        }
+        else if (payloadLength === 127) {
+            if (buffer.length < offset + 8) {
+                return false;
+            }
+            const big = buffer.readBigUInt64BE(offset);
+            if (big > BigInt(Number.MAX_SAFE_INTEGER)) {
+                this.fail('frame payload length is out of range');
+                return false;
+            }
+            payloadLength = Number(big);
+            offset += 8;
+        }
+        const isControl = (opcode & 0x8) !== 0;
+        if (isControl && (!fin || payloadLength > 125)) {
+            this.fail('invalid control frame');
+            return false;
+        }
+        const maskBytes = masked ? 4 : 0;
+        if (payloadLength > this.maxMessageBytes || this.fragmentBytes + payloadLength > this.maxMessageBytes) {
+            this.fail('message exceeds the configured size limit');
+            return false;
+        }
+        if (buffer.length < offset + maskBytes + payloadLength) {
+            return false;
+        }
+        const maskKey = masked ? buffer.subarray(offset, offset + 4) : undefined;
+        offset += maskBytes;
+        const payload = Buffer.from(buffer.subarray(offset, offset + payloadLength));
+        this.buffer = buffer.subarray(offset + payloadLength);
+        if (maskKey) {
+            for (let index = 0; index < payload.length; index++) {
+                payload[index] = payload[index] ^ maskKey[index % 4];
+            }
+        }
+        this.handleFrame(fin, opcode, payload);
+        return !this.failed;
+    }
+    handleFrame(fin, opcode, payload) {
+        switch (opcode) {
+            case exports.WS_OPCODE.continuation:
+                if (this.fragmentOpcode === undefined) {
+                    this.fail('continuation frame without a started message');
+                    return;
+                }
+                this.appendFragment(payload);
+                if (fin) {
+                    this.completeMessage();
+                }
+                return;
+            case exports.WS_OPCODE.text:
+            case exports.WS_OPCODE.binary:
+                if (this.fragmentOpcode !== undefined) {
+                    this.fail('new data frame while a fragmented message is in progress');
+                    return;
+                }
+                this.fragmentOpcode = opcode;
+                this.appendFragment(payload);
+                if (fin) {
+                    this.completeMessage();
+                }
+                return;
+            case exports.WS_OPCODE.close: {
+                if (payload.length === 1) {
+                    this.fail('close frame with a 1 byte payload');
+                    return;
+                }
+                // The close frame ends the data stream: nothing after it is dispatched.
+                this.failed = true;
+                this.buffer = Buffer.alloc(0);
+                this.sink.onClose(payload.length === 0 ? 1005 : payload.readUInt16BE(0), payload.subarray(2).toString('utf8'));
+                return;
+            }
+            case exports.WS_OPCODE.ping:
+                this.sink.onPing(payload);
+                return;
+            case exports.WS_OPCODE.pong:
+                this.sink.onPong(payload);
+                return;
+            default:
+                this.fail(`unsupported opcode ${opcode}`);
+        }
+    }
+    appendFragment(payload) {
+        this.fragmentBytes += payload.length;
+        if (this.fragmentBytes > this.maxMessageBytes) {
+            this.fail('message exceeds the configured size limit');
+            return;
+        }
+        this.fragments.push(payload);
+    }
+    completeMessage() {
+        const opcode = this.fragmentOpcode;
+        const fragments = this.fragments;
+        this.fragmentOpcode = undefined;
+        this.fragments = [];
+        this.fragmentBytes = 0;
+        const payload = fragments.length === 1 ? fragments[0] : Buffer.concat(fragments);
+        this.sink.onMessage(payload, opcode === exports.WS_OPCODE.binary);
+    }
+}
+exports.WebSocketFrameParser = WebSocketFrameParser;
+//# sourceMappingURL=WebSocketFrames.js.map

package/node_modules/@undefineds.co/ai-connections/dist/AiApiKeyPool.js

@@ -4,6 +4,7 @@ import { Button, Input, cn } from '@undefineds.co/shared-ui';
 import { ExternalLink, Eye, EyeOff, KeyRound, Loader2, LogOut, Plus, RotateCw } from 'lucide-react';
 import { normalizeProxyUrl } from './ai-connections-client.js';
 import { offeringTitle } from './offering-label.js';
+import { authorizationMethodsForOffering, isApiKeyMethod } from './authorization-methods.js';
 import { nextCredentialPriority } from './credential-labels.js';
 import { offeringEndpoint } from './offering-endpoints.js';
 export function AiApiKeyPool({ definition, offering, createOfferings, status, credentials, attempt, apiKey, baseUrl, busy, disabled, error, onApiKeyChange, onBaseUrlChange, onBeginApiKey, onBeginBrowser, onSaveApiKey, onDisconnect, onCreateApiKeyCredential, onUpdateCredential, initialEditing, initialCreate = false, onSavingChange, onCloseEdit, }) {
@@ -11,6 +12,12 @@ export function AiApiKeyPool({ definition, offering, createOfferings, status, cr
     const isConfigured = status === 'configured';
     const isConnected = status === 'connected';
     const hasPoolActions = Boolean(onCreateApiKeyCredential);
+    /**
+     * The legacy no-pool toolbar names its browser entry from the offering's own
+     * methods, like every other connect action. An api-key-only offering declares
+     * none, so that toolbar shows no browser button at all.
+     */
+    const browserMethod = authorizationMethodsForOffering(offering).find((method) => !isApiKeyMethod(method));
     const [createOfferingId, setCreateOfferingId] = useState(offering.id);
     const formOffering = createOfferings.find((item) => item.id === createOfferingId) ?? offering;
     const [showKey, setShowKey] = useState(false);
@@ -115,7 +122,7 @@ export function AiApiKeyPool({ definition, offering, createOfferings, status, cr
             }
         }
     };
-    return (_jsxs("div", { className: cn('space-y-3', formMode && 'w-full'), children: [attempt?.userCode ? (_jsxs("div", { className: "border-l-2 border-primary bg-muted/30 px-3 py-2 text-sm", children: ["\u9A8C\u8BC1\u7801\uFF1A", _jsx("strong", { className: "font-mono", children: attempt.userCode })] })) : null, !initialCreate && !initialEditing ? _jsxs("div", { className: "flex flex-wrap gap-2", children: [onCreateApiKeyCredential && createOfferings.length > 0 ? (_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: openCreateForm, children: [_jsx(Plus, { className: "mr-2 h-4 w-4" }), "\u6DFB\u52A0 API Key"] })) : null, hasPoolActions ? null : isConnected ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(RotateCw, { className: "mr-2 h-4 w-4" }), "\u91CD\u65B0\u8FDE\u63A5"] }), _jsxs(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: [_jsx(LogOut, { className: "mr-2 h-4 w-4" }), "\u65AD\u5F00\u8FDE\u63A5"] })] })) : isConfigured ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", "aria-label": "\u66F4\u65B0 API Key", disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u66F4\u65B0 API Key"] }), _jsx(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: "\u79FB\u9664\u914D\u7F6E" })] })) : (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving || definition.browserMode === 'connectUnsupported', onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(ExternalLink, { className: "mr-2 h-4 w-4" }), definition.browserLabel] }), _jsxs(Button, { variant: "outline", size: "sm", "aria-label": `${definition.name} API Key`, disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u914D\u7F6E API Key"] })] }))] }) : null, formMode ? (_jsxs("div", { className: "space-y-2 rounded-lg border border-border/50 bg-muted/10 p-3", children: [formMode === 'create' && createOfferings.length > 1 ? (_jsxs("label", { className: "block space-y-1 text-xs text-muted-foreground", children: [_jsx("span", { children: "\u5957\u9910 / \u533A\u57DF" }), _jsx("select", { "aria-label": `${definition.name} 套餐 / 区域`, value: createOfferingId, disabled: busy || disabled || saving, onChange: (event) => { setCreateOfferingId(event.target.value); setPoolFormError(undefined); }, className: "h-9 w-full rounded-md border border-input bg-background px-3 text-sm text-foreground", children: createOfferings.map((item) => _jsx("option", { value: item.id, children: offeringTitle(item) }, item.id)) })] })) : null, formMode === 'edit' ? (_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "aria-label": `${definition.name} API Key 标签`, placeholder: "\u540D\u79F0\uFF0C\u4F8B\u5982 Work key", value: poolLabel, onChange: (event) => setPoolLabel(event.target.value) })) : null, formMode === 'create' ? (_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: poolApiKey, onChange: (event) => setPoolApiKey(event.target.value), className: "font-mono" })) : null, formMode === 'edit' || showAdvanced ? (_jsxs(_Fragment, { children: [_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Base URL 输入`, placeholder: offeringEndpoint(formMode === 'edit' ? offering : formOffering) || definition.defaultBaseUrl || '默认服务地址', value: poolBaseUrl, onChange: (event) => setPoolBaseUrl(event.target.value), className: "font-mono text-xs" }), _jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Proxy URL 输入`, placeholder: "http://127.0.0.1:7890", value: poolProxyUrl, onChange: (event) => setPoolProxyUrl(event.target.value), className: "font-mono text-xs" })] })) : null, poolFormError ? _jsx("p", { className: "text-xs text-destructive", children: poolFormError }) : null, _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx(Button, { size: "sm", "aria-label": formMode === 'create' ? `保存 ${definition.name} API Key` : '保存凭证', disabled: busy || disabled || saving || (formMode === 'create' && !poolApiKey.trim()), onClick: savePoolForm, children: formMode === 'create' ? '保存 API Key' : '保存凭证' }), _jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: closePoolForm, children: "\u53D6\u6D88" }), formMode === 'create' ? (_jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: () => setShowAdvanced((current) => !current), children: showAdvanced ? '收起高级设置' : '高级设置' })) : null] })] })) : null, apiKeyAttempt && !formMode ? (_jsxs("div", { className: "space-y-2", children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsx("span", { className: "text-sm font-medium", children: "API Key" }), definition.apiKeyUrl ? (_jsx("a", { href: definition.apiKeyUrl, target: "_blank", rel: "noreferrer", className: "text-xs text-primary hover:underline", children: "\u83B7\u53D6 API Key" })) : null] }), _jsxs("div", { className: "group relative", children: [_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: apiKey, onChange: (event) => onApiKeyChange(event.target.value), className: "border-border/60 bg-muted/20 pr-10 font-mono transition-colors focus:border-primary/50 focus:bg-background" }), _jsx("div", { className: "absolute bottom-1 right-1 top-1 flex items-center", children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-full w-8 rounded hover:bg-muted", onClick: () => setShowKey((current) => !current), "aria-label": showKey ? '隐藏 API Key' : '显示 API Key', children: showKey
+    return (_jsxs("div", { className: cn('space-y-3', formMode && 'w-full'), children: [attempt?.userCode ? (_jsxs("div", { className: "border-l-2 border-primary bg-muted/30 px-3 py-2 text-sm", children: ["\u9A8C\u8BC1\u7801\uFF1A", _jsx("strong", { className: "font-mono", children: attempt.userCode })] })) : null, !initialCreate && !initialEditing ? _jsxs("div", { className: "flex flex-wrap gap-2", children: [onCreateApiKeyCredential && createOfferings.length > 0 ? (_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: openCreateForm, children: [_jsx(Plus, { className: "mr-2 h-4 w-4" }), "\u6DFB\u52A0 API Key"] })) : null, hasPoolActions ? null : isConnected ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(RotateCw, { className: "mr-2 h-4 w-4" }), "\u91CD\u65B0\u8FDE\u63A5"] }), _jsxs(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: [_jsx(LogOut, { className: "mr-2 h-4 w-4" }), "\u65AD\u5F00\u8FDE\u63A5"] })] })) : isConfigured ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", "aria-label": "\u66F4\u65B0 API Key", disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u66F4\u65B0 API Key"] }), _jsx(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: "\u79FB\u9664\u914D\u7F6E" })] })) : (_jsxs(_Fragment, { children: [browserMethod ? (_jsxs(Button, { variant: "outline", size: "sm", title: browserMethod.lifecycle === 'unavailable' ? browserMethod.reason : undefined, disabled: busy || disabled || saving || browserMethod.lifecycle === 'unavailable', onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(ExternalLink, { className: "mr-2 h-4 w-4" }), browserMethod.label] })) : null, _jsxs(Button, { variant: "outline", size: "sm", "aria-label": `${definition.name} API Key`, disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u914D\u7F6E API Key"] })] }))] }) : null, formMode ? (_jsxs("div", { className: "space-y-2 rounded-lg border border-border/50 bg-muted/10 p-3", children: [formMode === 'create' && createOfferings.length > 1 ? (_jsxs("label", { className: "block space-y-1 text-xs text-muted-foreground", children: [_jsx("span", { children: "\u5957\u9910 / \u533A\u57DF" }), _jsx("select", { "aria-label": `${definition.name} 套餐 / 区域`, value: createOfferingId, disabled: busy || disabled || saving, onChange: (event) => { setCreateOfferingId(event.target.value); setPoolFormError(undefined); }, className: "h-9 w-full rounded-md border border-input bg-background px-3 text-sm text-foreground", children: createOfferings.map((item) => _jsx("option", { value: item.id, children: offeringTitle(item) }, item.id)) })] })) : null, formMode === 'edit' ? (_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "aria-label": `${definition.name} API Key 标签`, placeholder: "\u540D\u79F0\uFF0C\u4F8B\u5982 Work key", value: poolLabel, onChange: (event) => setPoolLabel(event.target.value) })) : null, formMode === 'create' ? (_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: poolApiKey, onChange: (event) => setPoolApiKey(event.target.value), className: "font-mono" })) : null, formMode === 'edit' || showAdvanced ? (_jsxs(_Fragment, { children: [_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Base URL 输入`, placeholder: offeringEndpoint(formMode === 'edit' ? offering : formOffering) || definition.defaultBaseUrl || '默认服务地址', value: poolBaseUrl, onChange: (event) => setPoolBaseUrl(event.target.value), className: "font-mono text-xs" }), _jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Proxy URL 输入`, placeholder: "http://127.0.0.1:7890", value: poolProxyUrl, onChange: (event) => setPoolProxyUrl(event.target.value), className: "font-mono text-xs" })] })) : null, poolFormError ? _jsx("p", { className: "text-xs text-destructive", children: poolFormError }) : null, _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx(Button, { size: "sm", "aria-label": formMode === 'create' ? `保存 ${definition.name} API Key` : '保存凭证', disabled: busy || disabled || saving || (formMode === 'create' && !poolApiKey.trim()), onClick: savePoolForm, children: formMode === 'create' ? '保存 API Key' : '保存凭证' }), _jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: closePoolForm, children: "\u53D6\u6D88" }), formMode === 'create' ? (_jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: () => setShowAdvanced((current) => !current), children: showAdvanced ? '收起高级设置' : '高级设置' })) : null] })] })) : null, apiKeyAttempt && !formMode ? (_jsxs("div", { className: "space-y-2", children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsx("span", { className: "text-sm font-medium", children: "API Key" }), definition.apiKeyUrl ? (_jsx("a", { href: definition.apiKeyUrl, target: "_blank", rel: "noreferrer", className: "text-xs text-primary hover:underline", children: "\u83B7\u53D6 API Key" })) : null] }), _jsxs("div", { className: "group relative", children: [_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: apiKey, onChange: (event) => onApiKeyChange(event.target.value), className: "border-border/60 bg-muted/20 pr-10 font-mono transition-colors focus:border-primary/50 focus:bg-background" }), _jsx("div", { className: "absolute bottom-1 right-1 top-1 flex items-center", children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-full w-8 rounded hover:bg-muted", onClick: () => setShowKey((current) => !current), "aria-label": showKey ? '隐藏 API Key' : '显示 API Key', children: showKey
                                         ? _jsx(EyeOff, { className: "h-4 w-4 text-muted-foreground" })
                                         : _jsx(Eye, { className: "h-4 w-4 text-muted-foreground" }) }) })] }), onBaseUrlChange ? (_jsxs("div", { className: "space-y-1.5", children: [_jsx("span", { className: "text-xs font-medium text-muted-foreground", children: "Base URL\uFF08\u9009\u586B\uFF09" }), _jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Base URL 输入`, placeholder: definition.defaultBaseUrl || '默认服务地址', value: baseUrl, onChange: (event) => onBaseUrlChange(event.target.value), className: "border-border/60 bg-muted/20 font-mono text-xs transition-colors focus:border-primary/50 focus:bg-background" }), _jsxs("p", { className: "break-all font-mono text-[11px] text-muted-foreground opacity-80", children: [_jsx("span", { className: "mr-1 select-none opacity-50", children: "\u9884\u89C8:" }), (baseUrl.trim() || definition.defaultBaseUrl || '').replace(/\/+$/, ''), "/chat/completions"] })] })) : null, _jsx(Button, { size: "sm", "aria-label": `保存 ${definition.name} API Key`, disabled: !apiKey.trim() || busy || disabled, onClick: onSaveApiKey, children: "\u4FDD\u5B58 API Key" })] })) : null, error ? _jsx("p", { className: "text-sm text-destructive", children: error }) : null] }));
 }

package/node_modules/@undefineds.co/ai-connections/dist/AiAuthorizationActions.d.ts

@@ -1,8 +1,17 @@
 import type { AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderOffering } from './ai-connections-client';
-export declare function AiAuthorizationActions({ methods, offering, hasCredentials, busy, disabled, onBeginOffering, onCreateLocalCredential, }: {
+/**
+ * The offering's own entries, one button per declared `authorizationMethod`.
+ *
+ * A method that is implemented but unavailable in this deployment still gets its
+ * button, greyed at the same spec as its neighbours so the row keeps one line,
+ * with the reason as its tooltip. Nothing explains itself in a second row: the
+ * entry's own state is the message, and a list of internal reasons underneath
+ * the row reflows the buttons around it. Methods this build has not implemented
+ * never reach here - the server omits them.
+ */
+export declare function AiAuthorizationActions({ methods, offering, busy, disabled, onBeginOffering, onCreateLocalCredential, }: {
     methods: AiProviderAuthorizationMethod[];
     offering: AiProviderOffering;
-    hasCredentials: boolean;
     busy: boolean;
     disabled: boolean;
     onBeginOffering?: (offering: AiProviderOffering, mode: AiConnectionsMode, method?: AiProviderAuthorizationMethod) => void;

package/node_modules/@undefineds.co/ai-connections/dist/AiAuthorizationActions.js

@@ -2,17 +2,34 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Button } from '@undefineds.co/shared-ui';
 import { ExternalLink, Loader2, Plus } from 'lucide-react';
 import { connectModeForMethod, isLocalMethod, isOAuthMode } from './authorization-methods.js';
-export function AiAuthorizationActions({ methods, offering, hasCredentials, busy, disabled, onBeginOffering, onCreateLocalCredential, }) {
+/**
+ * The offering's own entries, one button per declared `authorizationMethod`.
+ *
+ * A method that is implemented but unavailable in this deployment still gets its
+ * button, greyed at the same spec as its neighbours so the row keeps one line,
+ * with the reason as its tooltip. Nothing explains itself in a second row: the
+ * entry's own state is the message, and a list of internal reasons underneath
+ * the row reflows the buttons around it. Methods this build has not implemented
+ * never reach here - the server omits them.
+ */
+export function AiAuthorizationActions({ methods, offering, busy, disabled, onBeginOffering, onCreateLocalCredential, }) {
     if (methods.length === 0)
         return null;
-    return (_jsx("div", { className: "space-y-2", children: _jsx("div", { className: "flex flex-wrap gap-2", children: methods.map((method) => {
-                const connectMode = connectModeForMethod(method);
-                if (isOAuthMode(connectMode)) {
-                    return (_jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", disabled: busy || disabled || !onBeginOffering, onClick: () => onBeginOffering?.(offering, connectMode, method), children: [busy ? _jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" }) : _jsx(ExternalLink, { className: "h-3.5 w-3.5" }), method.label || (hasCredentials ? '添加账号' : '登录')] }, method.id));
-                }
-                if (isLocalMethod(method)) {
-                    return (_jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", title: "\u5BFC\u5165\u5F53\u524D\u8BBE\u5907\u5DF2\u6709\u767B\u5F55\u6001\uFF0C\u4E0D\u4F1A\u53D1\u8D77\u65B0\u7684\u6D4F\u89C8\u5668\u6388\u6743\u3002", disabled: busy || disabled || !onCreateLocalCredential, onClick: () => void onCreateLocalCredential?.(offering, method), children: [busy ? _jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" }) : _jsx(Plus, { className: "h-3.5 w-3.5" }), method.label || '已有登录态'] }, method.id));
-                }
+    return (_jsx("div", { className: "flex flex-wrap gap-2", children: methods.map((method) => {
+            const connectMode = connectModeForMethod(method);
+            const unavailable = method.lifecycle === 'unavailable';
+            // An entry without a label is not one the offering asked for; the
+            // button is named by the method itself, never by a provider default.
+            if (!method.label)
                 return null;
-            }) }) }));
+            if (isOAuthMode(connectMode)) {
+                return (_jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", title: unavailable ? method.reason : undefined, disabled: busy || disabled || unavailable || !onBeginOffering, onClick: () => onBeginOffering?.(offering, connectMode, method), children: [busy ? _jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" }) : _jsx(ExternalLink, { className: "h-3.5 w-3.5" }), method.label] }, method.id));
+            }
+            if (isLocalMethod(method)) {
+                return (_jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", title: unavailable
+                        ? method.reason
+                        : '导入当前设备已有登录态，不会发起新的浏览器授权。', disabled: busy || disabled || unavailable || !onCreateLocalCredential, onClick: () => void onCreateLocalCredential?.(offering, method), children: [busy ? _jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" }) : _jsx(Plus, { className: "h-3.5 w-3.5" }), method.label] }, method.id));
+            }
+            return null;
+        }) }));
 }

package/node_modules/@undefineds.co/ai-connections/dist/AiClientConfigurationSection.d.ts

@@ -1,4 +1,5 @@
 import type { AiClientConfigurationModel } from '@undefineds.co/extension-sdk/web';
+import { normalizeV1Endpoint } from './endpoint-urls';
 export declare const AI_CONNECTIONS_CLIENTS: readonly ["codex", "claude-code", "pi", "codebuddy"];
 export type AiConnectionsClientId = (typeof AI_CONNECTIONS_CLIENTS)[number];
 export interface AiClientConfigurationStatus {
@@ -68,4 +69,10 @@ export declare function AiClientConfigurationSection({ bridge, endpoint, client,
     compact?: boolean;
     onComplete?: () => void;
 }): import("react").JSX.Element;
+/**
+ * The OpenAI-compatible base a client is pointed at, derived from the Xpod URL.
+ * The rule itself is shared with the client-config adapters, so what a copied
+ * config claims and what the adapters write cannot drift apart.
+ */
+export declare const openAiCompatibleBaseUrl: typeof normalizeV1Endpoint;
 export declare function manualConfigurationText(client: AiConnectionsClientId, endpoint: string, apiKey?: string): string;

package/node_modules/@undefineds.co/ai-connections/dist/AiClientConfigurationSection.js

@@ -1,9 +1,11 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useRef, useState } from 'react';
 import { Badge, Button, Input, } from '@undefineds.co/shared-ui';
-import { Copy, RotateCcw, SquareTerminal } from 'lucide-react';
+import { RotateCcw, SquareTerminal } from 'lucide-react';
 import { normalizeAiConnectionsThrownError } from './ai-connections-client.js';
 import { getClientAvatar } from './client-visuals.js';
+import { normalizeMessagesEndpoint, normalizeV1Endpoint } from './endpoint-urls.js';
+import { AiCopyButton } from './AiCopyButton.js';
 export const AI_CONNECTIONS_CLIENTS = ['codex', 'claude-code', 'pi', 'codebuddy'];
 export const AI_CLIENT_LABELS = {
     codex: 'Codex',
@@ -23,12 +25,10 @@ export function AiClientConfigurationSection({ bridge, endpoint, client, createC
     const [dryRun, setDryRun] = useState();
     const [confirmationValue, setConfirmationValue] = useState('');
     const [busy, setBusy] = useState(false);
-    const [copiedManualConfig, setCopiedManualConfig] = useState(false);
     const autoApplyStarted = useRef(false);
     useEffect(() => {
         setDryRun(undefined);
         setConfirmationValue('');
-        setCopiedManualConfig(false);
         if (!bridge) {
             setStatus({ status: 'unavailable' });
             return;
@@ -149,13 +149,10 @@ export function AiClientConfigurationSection({ bridge, endpoint, client, createC
     const confirmationSatisfied = !confirmation?.required || confirmationValue === confirmation.token;
     const clientLabel = AI_CLIENT_LABELS[client];
     const manual = !bridge;
-    const copyManualConfig = async () => {
-        await navigator.clipboard?.writeText(manualConfigurationText(client, endpoint, manualApiKey));
-        setCopiedManualConfig(true);
-    };
+    const manualConfig = manualConfigurationText(client, endpoint, manualApiKey);
     return (_jsxs("div", { className: compact ? '' : 'overflow-hidden rounded-md border border-border/60', children: [!compact ? _jsxs("div", { className: "flex flex-wrap items-center gap-2 px-3 py-2", children: [_jsx("span", { className: "flex h-8 w-8 shrink-0 items-center justify-center rounded-md bg-muted text-muted-foreground", children: _jsx(AiClientIcon, { client: client }) }), _jsxs("div", { className: "min-w-[10rem] flex-1", children: [_jsx("div", { className: "text-sm font-medium", children: clientLabel }), !manual ? _jsx("div", { className: "mt-0.5 text-xs text-muted-foreground", children: status.message ?? (status.status === 'configured'
                                     ? `${clientLabel} 正在使用 Xpod。`
-                                    : '可自动写入本机配置。') }) : null] }), !manual ? _jsx(Badge, { variant: "secondary", children: statusLabel(status.status) }) : null, manual ? (_jsxs(Button, { variant: "ghost", size: "icon", "aria-label": `复制 ${clientLabel} 配置`, title: `复制 ${clientLabel} 配置`, onClick: () => void copyManualConfig(), children: [_jsx(Copy, { className: "h-4 w-4" }), _jsx("span", { className: "sr-only", children: copiedManualConfig ? '已复制' : '复制配置' })] })) : (_jsxs("div", { className: "flex items-center gap-1", children: [_jsx(Button, { variant: "outline", size: "sm", "aria-label": `配置 ${clientLabel}`, disabled: busy, onClick: () => void plan(), children: "\u914D\u7F6E" }), _jsx(Button, { variant: "ghost", size: "icon", "aria-label": `恢复 ${clientLabel} 配置`, disabled: status.status === 'notConfigured' || busy, onClick: () => void restore(), children: _jsx(RotateCcw, { className: "h-4 w-4" }) })] }))] }) : null, compact && busy ? (_jsxs("div", { className: "py-1 text-xs text-muted-foreground", children: ["\u6B63\u5728\u5E94\u7528 ", clientLabel, " \u914D\u7F6E\u2026"] })) : null, compact && !busy && status.message ? (_jsxs("div", { className: "flex flex-wrap items-center justify-between gap-2 py-1 text-xs text-destructive", children: [_jsx("span", { children: status.message }), _jsx(Button, { variant: "outline", size: "sm", onClick: () => void plan(), children: "\u91CD\u8BD5\u5E94\u7528\u914D\u7F6E" })] })) : null, dryRun ? (_jsxs("div", { className: "space-y-3 border-t border-border/60 bg-muted/20 px-4 py-3", children: [_jsx("div", { className: "text-xs font-medium", children: "\u5C06\u6267\u884C\u4EE5\u4E0B\u66F4\u6539" }), dryRun.changes.map((change) => (_jsxs("div", { className: "text-xs text-muted-foreground", children: [_jsx("span", { className: "font-mono", children: change.target }), ' · ', changeActionLabel(change.action), change.backup ? ' · 创建备份' : ''] }, `${change.target}:${change.action}`))), confirmation?.required ? (_jsxs("div", { className: "space-y-2", children: [confirmation.message ? _jsx("div", { className: "text-xs text-muted-foreground", children: confirmation.message }) : null, _jsxs("div", { className: "text-xs text-muted-foreground", children: ["\u786E\u8BA4\u7801\uFF1A", _jsx("code", { className: "font-mono text-foreground", children: confirmation.token })] }), _jsx(Input, { "aria-label": `输入确认码以应用 ${clientLabel} 配置`, value: confirmationValue, onChange: (event) => setConfirmationValue(event.target.value) })] })) : null, _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { size: "sm", "aria-label": confirmation?.required
+                                    : '可自动写入本机配置。') }) : null] }), !manual ? _jsx(Badge, { variant: "secondary", children: statusLabel(status.status) }) : null, manual ? (_jsx(AiCopyButton, { value: manualConfig, label: `${clientLabel} 配置`, variant: "ghost", size: "icon", iconClassName: "h-4 w-4" })) : (_jsxs("div", { className: "flex items-center gap-1", children: [_jsx(Button, { variant: "outline", size: "sm", "aria-label": `配置 ${clientLabel}`, disabled: busy, onClick: () => void plan(), children: "\u914D\u7F6E" }), _jsx(Button, { variant: "ghost", size: "icon", "aria-label": `恢复 ${clientLabel} 配置`, disabled: status.status === 'notConfigured' || busy, onClick: () => void restore(), children: _jsx(RotateCcw, { className: "h-4 w-4" }) })] }))] }) : null, compact && busy ? (_jsxs("div", { className: "py-1 text-xs text-muted-foreground", children: ["\u6B63\u5728\u5E94\u7528 ", clientLabel, " \u914D\u7F6E\u2026"] })) : null, compact && !busy && status.message ? (_jsxs("div", { className: "flex flex-wrap items-center justify-between gap-2 py-1 text-xs text-destructive", children: [_jsx("span", { children: status.message }), _jsx(Button, { variant: "outline", size: "sm", onClick: () => void plan(), children: "\u91CD\u8BD5\u5E94\u7528\u914D\u7F6E" })] })) : null, dryRun ? (_jsxs("div", { className: "space-y-3 border-t border-border/60 bg-muted/20 px-4 py-3", children: [_jsx("div", { className: "text-xs font-medium", children: "\u5C06\u6267\u884C\u4EE5\u4E0B\u66F4\u6539" }), dryRun.changes.map((change) => (_jsxs("div", { className: "text-xs text-muted-foreground", children: [_jsx("span", { className: "font-mono", children: change.target }), ' · ', changeActionLabel(change.action), change.backup ? ' · 创建备份' : ''] }, `${change.target}:${change.action}`))), confirmation?.required ? (_jsxs("div", { className: "space-y-2", children: [confirmation.message ? _jsx("div", { className: "text-xs text-muted-foreground", children: confirmation.message }) : null, _jsxs("div", { className: "text-xs text-muted-foreground", children: ["\u786E\u8BA4\u7801\uFF1A", _jsx("code", { className: "font-mono text-foreground", children: confirmation.token })] }), _jsx(Input, { "aria-label": `输入确认码以应用 ${clientLabel} 配置`, value: confirmationValue, onChange: (event) => setConfirmationValue(event.target.value) })] })) : null, _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { size: "sm", "aria-label": confirmation?.required
                                     ? `确认并应用 ${clientLabel} 配置`
                                     : `应用 ${clientLabel} 配置`, disabled: !createClientCredential || busy || !confirmationSatisfied, onClick: () => void apply(), children: confirmation?.required ? '确认并应用' : '应用配置' }), _jsx(Button, { variant: "ghost", size: "sm", disabled: busy, onClick: () => {
                                     setDryRun(undefined);
@@ -179,11 +176,16 @@ function statusLabel(status) {
         default: return '未配置';
     }
 }
+/**
+ * The OpenAI-compatible base a client is pointed at, derived from the Xpod URL.
+ * The rule itself is shared with the client-config adapters, so what a copied
+ * config claims and what the adapters write cannot drift apart.
+ */
+export const openAiCompatibleBaseUrl = normalizeV1Endpoint;
 export function manualConfigurationText(client, endpoint, apiKey) {
     const secret = apiKey ?? '<粘贴 Xpod API Key>';
-    const baseUrl = endpoint.trim().replace(/\/+$/, '');
-    const v1Url = baseUrl.endsWith('/v1') ? baseUrl : `${baseUrl}/v1`;
-    const messagesUrl = baseUrl.replace(/\/v1$/, '');
+    const v1Url = normalizeV1Endpoint(endpoint);
+    const messagesUrl = normalizeMessagesEndpoint(endpoint);
     switch (client) {
         case 'codex':
             return [

package/node_modules/@undefineds.co/ai-connections/dist/AiConnectDialog.js

@@ -33,7 +33,7 @@ export function AiConnectDialog({ controller, definition, offerings, apiOffering
                         const authorizationError = error?.offeringId === offering.id ? error.authorization : undefined;
                         const attemptedMethod = methods.find((method) => method.id === (authorizationError?.authorizationMethodId ?? offeringAttempt?.authorizationMethodId))
                             ?? activeMethods.find(isOAuthMethod);
-                        const attemptedMode = authorizationError?.mode ?? offeringAttempt?.mode ?? (attemptedMethod ? connectModeForMethod(attemptedMethod) : modeForOffering(offering, definition));
+                        const attemptedMode = authorizationError?.mode ?? offeringAttempt?.mode ?? (attemptedMethod ? connectModeForMethod(attemptedMethod) : modeForOffering(offering));
                         const offeringError = error?.offeringId === offering.id ? error.message : undefined;
                         if (offering.lifecycle === 'unavailable' && activeMethods.length === 0) {
                             return _jsxs("fieldset", { "data-create-offering": offering.id, className: "space-y-2 border-t border-border/50 pt-3 first:border-t-0 first:pt-0", children: [_jsx("legend", { className: "px-1 text-sm font-medium", children: offeringTitle(offering) }), _jsx("p", { className: "text-xs text-muted-foreground", children: offering.kind === 'oauth-subscription'

package/node_modules/@undefineds.co/ai-connections/dist/AiConnectionsList.js

@@ -2,9 +2,10 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useContext, useRef } from 'react';
 import { Avatar, AvatarFallback, AvatarImage, cn } from '@undefineds.co/shared-ui';
 import { WorkspaceLayoutContext } from '@undefineds.co/extension-sdk/react';
-import { getProviderAvatar, getProviderAvatarBackground } from './provider-visuals.js';
-import { AI_CONNECTIONS_PINNED_SECTIONS, PROVIDERS, useProviderLoadError, useProviderProducts, useProviderSearch, useProviderStates, useSelectedCredentialId, useSelectedProvider, useSelectedSection, } from './controller.js';
+import { XPOD_AVATAR, getProviderAvatar, getProviderAvatarBackground } from './provider-visuals.js';
+import { AI_CONNECTIONS_PINNED_SECTIONS, PROVIDERS, useAvailableProviders, useProviderLoadError, useProviderProducts, useProviderSearch, useProviderStates, useSelectedCredentialId, useSelectedProvider, useSelectedSection, } from './controller.js';
 export function AiConnectionsList({ controller }) {
+    const availableProviders = useAvailableProviders(controller);
     const workspace = useContext(WorkspaceLayoutContext);
     const selectedSection = useSelectedSection(controller);
     const selectedProvider = useSelectedProvider(controller);
@@ -13,7 +14,10 @@ export function AiConnectionsList({ controller }) {
     const providerStates = useProviderStates(controller);
     const providerProducts = useProviderProducts(controller);
     const providerLoadError = useProviderLoadError(controller);
-    const providerItems = PROVIDERS.reduce((items, provider) => {
+    const visibleProviders = availableProviders
+        ? PROVIDERS.filter((provider) => availableProviders.includes(provider.id))
+        : PROVIDERS;
+    const providerItems = visibleProviders.reduce((items, provider) => {
         if (provider.id !== 'custom')
             return [...items, { ...provider }];
         const credentials = providerProducts.custom?.credentials ?? [];
@@ -86,11 +90,11 @@ function moveSelection(items, requestedIndex, controller, optionRefs) {
 }
 /**
  * The pinned section is an issued-credential surface, i.e. another provider from
- * the client's point of view, so it uses the provider row's mark slot instead of
- * a generic key icon.
+ * the client's point of view, so it carries the Xpod provider mark and falls
+ * back to its initials only while that mark is unavailable.
  */
 function PinnedMark({ section: _section }) {
-    return (_jsx(Avatar, { className: "h-9 w-9 shrink-0 rounded-md border border-border/20 bg-muted", children: _jsx(AvatarFallback, { className: "rounded-md bg-muted text-[10px] font-bold uppercase text-muted-foreground", children: "XP" }) }));
+    return (_jsxs(Avatar, { className: "h-9 w-9 shrink-0 rounded-md border border-border/20", children: [_jsx(AvatarImage, { src: XPOD_AVATAR, className: "object-cover" }), _jsx(AvatarFallback, { className: "rounded-md bg-muted text-[10px] font-bold uppercase text-muted-foreground", children: "XP" })] }));
 }
 function ProviderStateIndicator({ state, statusId, }) {
     const active = state === 'configured' || state === 'connected';

package/node_modules/@undefineds.co/ai-connections/dist/AiConnectionsMain.d.ts

@@ -1,4 +1,19 @@
 import { type AiConnectionsController } from './controller';
+/**
+ * The page's live credentials table.
+ *
+ * `useCredentialRows` subscribes to the controller's snapshot of the collection:
+ * the rows it returns already include optimistic writes, so a create/update/
+ * delete shows before the Pod has confirmed it, and the projection diff keeps
+ * unchanged rows identical. Both the table and the layer that reads it are
+ * loaded lazily, so this hook is a plain `useSyncExternalStore` over whatever the
+ * controller has - which is nothing until the collection's first read lands.
+ *
+ * Until then - while the layer is still loading, after a failed first read, or
+ * when the host offers no collection at all - `credentialRows` stays undefined
+ * and the page keeps rendering what the store reported, so a table that cannot
+ * load is never shown as an empty table.
+ */
 export declare function AiConnectionsMain({ controller, renderToaster }: {
     controller: AiConnectionsController;
     renderToaster?: boolean;