@undefineds.co/xpod 0.4.10 → 0.4.12

package/dist/api/ai-gateway/routing/ModelRouter.js

@@ -5,6 +5,7 @@ const errors_1 = require("../errors");
 const connect_1 = require("../connect");
 const ProviderRegistry_1 = require("../providers/ProviderRegistry");
 const ModelsDevCatalog_1 = require("../providers/ModelsDevCatalog");
+const EmbeddingModelPolicy_1 = require("../../../ai/service/EmbeddingModelPolicy");
 class ModelRouter {
     constructor(options) {
         this.registry = options.registry;
@@ -13,6 +14,7 @@ class ModelRouter {
         this.selectionRepository = options.selectionRepository;
         this.defaultProvider = options.defaultProvider ? (0, ProviderRegistry_1.normalizeProviderId)(options.defaultProvider) : undefined;
         this.defaultModel = options.defaultModel;
+        this.embeddingModelPolicy = options.embeddingModelPolicy ?? EmbeddingModelPolicy_1.EmbeddingModelPolicy.allowAll();
         this.now = options.now ?? (() => new Date());
     }
     async route(input, excludeCredentialIds = new Set()) {
@@ -136,7 +138,7 @@ class ModelRouter {
                     model,
                     source: 'exact-model',
                     selectionDefault: Boolean(selection.defaultModel && sameModel(selection.defaultModel, selected.id)),
-                    projection: modelProjection(provider, model),
+                    projection: modelProjection(provider, model, selected.displayName),
                 });
             }
         }
@@ -478,8 +480,16 @@ class ModelRouter {
             const selected = unrestricted
                 ? provider.models.map((model) => model.id)
                 : providerCandidates.flatMap((candidate) => candidate.models ?? []);
+            const selectedNames = new Map();
+            for (const candidate of providerCandidates) {
+                for (const [id, name] of Object.entries(candidate.modelNames ?? {})) {
+                    if (!selectedNames.has(id)) {
+                        selectedNames.set(id, name);
+                    }
+                }
+            }
             for (const model of selected) {
-                const projection = modelProjection(provider, model);
+                const projection = modelProjection(provider, model, selectedNames.get(modelIdentity(model)));
                 if (seen.has(projection.id)) {
                     continue;
                 }
@@ -499,6 +509,7 @@ class ModelRouter {
                         continue;
                     }
                     seen.add(key);
+                    const customCapabilities = this.visibleCustomCapabilities(provider.id, id, customModel.capabilities);
                     models.push({
                         id,
                         object: 'model',
@@ -513,7 +524,7 @@ class ModelRouter {
                                 },
                             }
                             : {}),
-                        ...(customModel.capabilities?.length ? { custom_capabilities: [...customModel.capabilities] } : {}),
+                        ...(customCapabilities.length ? { custom_capabilities: customCapabilities } : {}),
                     });
                 }
             }
@@ -526,6 +537,19 @@ class ModelRouter {
             && candidate.quota?.status !== 'exhausted'
             && (!candidate.cooldownUntil || candidate.cooldownUntil.getTime() <= this.now().getTime());
     }
+    /**
+     * A Pod can declare any capability on a custom model. Embedding is the one
+     * capability a deployment gates through its own catalog, so never advertise an
+     * embedding model the catalog does not provide. Other declared capabilities
+     * keep their existing behavior.
+     */
+    visibleCustomCapabilities(providerId, modelId, capabilities) {
+        if (!capabilities?.length) {
+            return [];
+        }
+        return capabilities.filter((capability) => capability.trim().toLowerCase() !== 'embedding'
+            || this.embeddingModelPolicy.isAllowed({ provider: providerId, model: modelId }));
+    }
 }
 exports.ModelRouter = ModelRouter;
 function modelIdentity(value) {
@@ -536,19 +560,34 @@ function modelIdentity(value) {
 function sameModel(left, right) {
     return modelIdentity(left).toLowerCase() === modelIdentity(right).toLowerCase();
 }
-function modelProjection(provider, modelId) {
+/**
+ * One visible model as the OpenAI-shaped `/v1/models` entry.
+ *
+ * `display_name` is the same evidence the settings model list shows next to the
+ * id: the name the Pod row carries from discovery, or the catalog's name for a
+ * model the registry describes. Without it the published list can only be read
+ * as raw ids while the provider pages show names for the very same models.
+ */
+function modelProjection(provider, modelId, displayName) {
     const descriptor = provider.models.find((model) => sameModel(model.id, modelId)
         || (model.aliases ?? []).some((alias) => sameModel(alias, modelId)))
         ?? (0, ModelsDevCatalog_1.lookupModelsDevModelDescriptor)((0, ProviderRegistry_1.normalizeProviderId)(provider.id), modelIdentity(modelId));
+    const name = displayName ?? catalogDisplayName(descriptor);
     return {
         id: modelIdentity(modelId),
         object: 'model',
         owned_by: provider.id,
+        ...(name ? { display_name: name } : {}),
         ...(descriptor?.contextWindow !== undefined ? { context_window: descriptor.contextWindow } : {}),
         ...(descriptor?.capabilities ? { capabilities: descriptor.capabilities } : {}),
         ...(descriptor?.protocols ? { protocols: descriptor.protocols } : {}),
     };
 }
+/** Discovery metadata names a model the same way the settings summary does. */
+function catalogDisplayName(descriptor) {
+    const name = descriptor?.metadata?.name;
+    return typeof name === 'string' && name.trim() ? name.trim() : undefined;
+}
 function modelNotAvailableError(model) {
     return new errors_1.GatewayProtocolError('Requested model is not available for this account', {
         code: 'model_not_available',

package/dist/api/ai-gateway/service-access/AiConnectionsServiceAccess.d.ts

@@ -1,5 +1,13 @@
+import { AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS } from '@undefineds.co/ai-connections/provider-catalog';
 export declare const AI_CONNECTIONS_APPLET_ID = "co.undefineds.ai-connections";
-export declare const AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS: readonly ["openai", "openai-official-subscription", "openai-api-platform", "anthropic", "anthropic-official-subscription", "anthropic-api-platform", "kimi", "kimi-subscription-key", "kimi-api-platform", "bailian", "bailian-pay-as-you-go", "bailian-token-plan", "bailian-token-plan-team", "bailian-coding-plan", "deepseek", "deepseek-api-platform", "zhipu", "zhipu-api-platform", "zhipu-coding-plan", "ollama", "ollama-local", "custom", "custom-openai-compatible", "custom-anthropic-compatible"];
+/**
+ * Provider documents this service may reach. The list is projected from the
+ * shared provider/offering catalogue (`<provider>` plus
+ * `<provider>-<offeringId>`); re-exported here because the service-access
+ * descriptor is the server-side consumer of that one source, and the applet's
+ * descriptor validator reads the same constant.
+ */
+export { AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS };
 export interface AiConnectionsServiceAccessDescriptor {
     appletId: typeof AI_CONNECTIONS_APPLET_ID;
     service: {

package/dist/api/ai-gateway/service-access/AiConnectionsServiceAccess.js

@@ -7,34 +7,10 @@ exports.resolveGatewayAccessKeySecretResourceUrl = resolveGatewayAccessKeySecret
 exports.resolveGatewayAccessKeySparqlEndpoint = resolveGatewayAccessKeySparqlEndpoint;
 exports.isGatewayAccessKeySparqlEndpoint = isGatewayAccessKeySparqlEndpoint;
 const drizzle_solid_1 = require("@undefineds.co/drizzle-solid");
+const provider_catalog_1 = require("@undefineds.co/ai-connections/provider-catalog");
+Object.defineProperty(exports, "AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS", { enumerable: true, get: function () { return provider_catalog_1.AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS; } });
 const models_1 = require("@undefineds.co/models");
 exports.AI_CONNECTIONS_APPLET_ID = 'co.undefineds.ai-connections';
-exports.AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS = [
-    'openai',
-    'openai-official-subscription',
-    'openai-api-platform',
-    'anthropic',
-    'anthropic-official-subscription',
-    'anthropic-api-platform',
-    'kimi',
-    'kimi-subscription-key',
-    'kimi-api-platform',
-    'bailian',
-    'bailian-pay-as-you-go',
-    'bailian-token-plan',
-    'bailian-token-plan-team',
-    'bailian-coding-plan',
-    'deepseek',
-    'deepseek-api-platform',
-    'zhipu',
-    'zhipu-api-platform',
-    'zhipu-coding-plan',
-    'ollama',
-    'ollama-local',
-    'custom',
-    'custom-openai-compatible',
-    'custom-anthropic-compatible',
-];
 const declaredResourceBases = new WeakMap([
     [models_1.credentialResource, declaredResourceBase(models_1.credentialResource)],
     [models_1.aiProviderResource, declaredResourceBase(models_1.aiProviderResource)],
@@ -54,7 +30,7 @@ function createAiConnectionsServiceAccess(input) {
             ['gatewayAccessKeys', resolveGatewayAccessKeyResourceUrl(input.ownerWebId, input.podBaseUrl)],
             ['gatewayAccessKeySecrets', resolveGatewayAccessKeySecretResourceUrl(input.ownerWebId, input.podBaseUrl), 'application/json'],
             ['quotaSnapshots', resourceUrl(input.ownerWebId, models_1.quotaSnapshotResource, input.podBaseUrl)],
-            ...exports.AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS.map((provider) => [
+            ...provider_catalog_1.AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS.map((provider) => [
                 `providerDocument:${provider}`,
                 providerDocumentUrl(input.ownerWebId, provider, input.podBaseUrl),
             ]),

package/dist/api/auth/ClientCredentialsAuthenticator.d.ts

@@ -42,5 +42,4 @@ export declare class ClientCredentialsAuthenticator implements Authenticator {
     canAuthenticate(request: IncomingMessage): boolean;
     authenticate(request: IncomingMessage): Promise<AuthResult>;
     private exchangeForToken;
-    private isJwt;
 }

package/dist/api/auth/ClientCredentialsAuthenticator.js

@@ -173,9 +173,6 @@ class ClientCredentialsAuthenticator {
             return { success: false, error: 'Token exchange failed' };
         }
     }
-    isJwt(token) {
-        return /^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(token);
-    }
 }
 exports.ClientCredentialsAuthenticator = ClientCredentialsAuthenticator;
 function tokenEndpointRoutingHeaders(tokenEndpoint, publicBaseUrl) {

package/dist/api/auth/index.d.ts

@@ -3,4 +3,5 @@ export * from './AuthContext';
 export * from './SolidTokenAuthenticator';
 export * from './ClientCredentialsAuthenticator';
 export * from './ServiceTokenAuthenticator';
+export * from './NodeTokenAuthenticator';
 export * from './MultiAuthenticator';

package/dist/api/auth/index.js

@@ -19,6 +19,6 @@ __exportStar(require("./AuthContext"), exports);
 __exportStar(require("./SolidTokenAuthenticator"), exports);
 __exportStar(require("./ClientCredentialsAuthenticator"), exports);
 __exportStar(require("./ServiceTokenAuthenticator"), exports);
-// export * from './NodeTokenAuthenticator';  // TODO: Fix later
+__exportStar(require("./NodeTokenAuthenticator"), exports);
 __exportStar(require("./MultiAuthenticator"), exports);
 //# sourceMappingURL=index.js.map

package/dist/api/chatkit/pod-store.d.ts

@@ -3,12 +3,21 @@ import type { ThreadMetadata, ThreadRef, ThreadItem, Attachment, Page, StoreItem
 import { type RunListOptions, type RunRecordData, type RunStepRecordData, type RunStore } from '../runs/store';
 import { type TaskListOptions, type TaskRecordData, type TaskStore } from '../tasks/store';
 import { type TaskAuthBindingRepository } from '../tasks/TaskAuthBinding';
+import { type AiCredentialSecretDecoder } from '../../ai/service/AiCredentialSecret';
 import { CredentialStatus } from '../../credential/schema/types';
 import { type ServerGroupReconcilerService } from '../reconciler';
 import { type ReaderAiConfig } from '../../document/ReaderAiConfig';
 export interface PodChatKitStoreOptions {
     tokenEndpoint: string;
     serverGroupReconcilerService?: ServerGroupReconcilerService;
+    /**
+     * Reads a Pod credential secret (AI Connections envelope, `plaintext-v1`
+     * payload, or a legacy bare `apiKey`). Defaults to the plaintext decoder; the
+     * container injects a vault-backed one so wrapped Cloud secrets resolve too.
+     */
+    credentialSecretDecoder?: AiCredentialSecretDecoder;
+    /** Deployment whose credentials this runtime prefers when a Pod holds several. */
+    deployment?: string;
 }
 /**
  * Pod-based ChatKit Store implementation
@@ -23,6 +32,8 @@ export declare class PodChatKitStore implements ChatKitStore<StoreContext>, RunS
     private readonly logger;
     private readonly tokenEndpoint;
     private readonly serverGroupReconcilerService?;
+    private readonly credentialSecretDecoder;
+    private readonly deployment?;
     /** 默认 Chat 容器 ID */
     private static readonly DEFAULT_CHAT_ID;
     constructor(options: PodChatKitStoreOptions);
@@ -216,12 +227,32 @@ export declare class PodChatKitStore implements ChatKitStore<StoreContext>, RunS
     private resolvePodResource;
     private findProviderForCredential;
     private findConfiguredEmbeddingModel;
+    /**
+     * The embedding model this Pod may index with.
+     *
+     * AI Connections model selection is the allowlist: once a provider has active
+     * embedding-typed selections, only those models are usable, and the first one
+     * becomes the default when the Pod names none. A provider without an explicit
+     * embedding selection keeps the configured model (or the provider default), so
+     * existing Pods keep indexing.
+     */
+    private resolveEmbeddingModel;
+    private selectedEmbeddingModels;
     private sortAiCredentialCandidates;
     private isTruthyValue;
+    private isDeploymentCredential;
     private timestampValue;
     private parseIntegerValue;
     private extractModelId;
     private queryAiConfigFromSettingsSparql;
+    /**
+     * AI Connections stores the secret in `encryptedSecret`; older rows carry a
+     * bare `apiKey`. Resolve whichever the row has, so a key entered once is usable
+     * by chat and by embedding/indexing alike.
+     */
+    private resolveCredentialSecret;
+    private credentialEnabledFromMetadata;
+    private parseMetadataValue;
     getAiConfig(context: StoreContext): Promise<{
         providerId: string;
         baseUrl: string;

package/dist/api/chatkit/pod-store.js

@@ -27,6 +27,7 @@ const provider_1 = require("../../ai/schema/provider");
 const model_1 = require("../../ai/schema/model");
 const config_1 = require("../../ai/schema/config");
 const defaultEmbeddingProfile_1 = require("../../ai/service/defaultEmbeddingProfile");
+const AiCredentialSecret_1 = require("../../ai/service/AiCredentialSecret");
 const tables_1 = require("../../credential/schema/tables");
 const types_2 = require("../../credential/schema/types");
 const models_1 = require("@undefineds.co/models");
@@ -60,6 +61,8 @@ class PodChatKitStore {
         // Track recently created message IDs to avoid SELECT cache timing issues
         this.recentlyCreatedIds = new Set();
         this.tokenEndpoint = options.tokenEndpoint;
+        this.credentialSecretDecoder = options.credentialSecretDecoder ?? AiCredentialSecret_1.defaultAiCredentialSecretDecoder;
+        this.deployment = options.deployment;
         this.serverGroupReconcilerService = options.serverGroupReconcilerService;
     }
     /** Build a Pod-scoped context for trusted internal maintenance jobs. */
@@ -1958,8 +1961,60 @@ WHERE { ${deletePatterns.join(' ')} }
             return undefined;
         }
     }
+    /**
+     * The embedding model this Pod may index with.
+     *
+     * AI Connections model selection is the allowlist: once a provider has active
+     * embedding-typed selections, only those models are usable, and the first one
+     * becomes the default when the Pod names none. A provider without an explicit
+     * embedding selection keeps the configured model (or the provider default), so
+     * existing Pods keep indexing.
+     */
+    async resolveEmbeddingModel(db, providerId) {
+        const configured = await this.findConfiguredEmbeddingModel(db, providerId)
+            ?? (0, defaultEmbeddingProfile_1.defaultEmbeddingModelForProvider)(providerId);
+        const selected = await this.selectedEmbeddingModels(db, providerId);
+        if (selected.length === 0) {
+            return configured;
+        }
+        if (!configured) {
+            return selected[0];
+        }
+        return selected.some((model) => model.toLowerCase() === configured.toLowerCase())
+            ? configured
+            : undefined;
+    }
+    async selectedEmbeddingModels(db, providerId) {
+        try {
+            const rows = await db.select().from(model_1.Model);
+            const selected = new Set();
+            for (const row of rows) {
+                if (!row || String(row.status ?? '') !== 'active')
+                    continue;
+                if (String(row.modelType ?? '').toLowerCase() !== 'embedding')
+                    continue;
+                const rowProvider = this.extractProviderId(String(row.isProvidedBy ?? ''));
+                if (rowProvider && rowProvider !== providerId)
+                    continue;
+                const id = this.extractModelId(String(row.id ?? ''));
+                if (id)
+                    selected.add(id);
+            }
+            return [...selected];
+        }
+        catch (error) {
+            this.logger.warn(`Failed to read AI model selections for ${providerId}: ${error}`);
+            return [];
+        }
+    }
     sortAiCredentialCandidates(credentials) {
         return [...credentials].sort((left, right) => {
+            // A Pod can hold credentials for more than one deployment. Prefer this
+            // runtime's own deployment, exactly like the Gateway credential lookup.
+            const deploymentDelta = Number(this.isDeploymentCredential(right.id)) - Number(this.isDeploymentCredential(left.id));
+            if (deploymentDelta !== 0) {
+                return deploymentDelta;
+            }
             const defaultDelta = Number(this.isTruthyValue(right.isDefault)) - Number(this.isTruthyValue(left.isDefault));
             if (defaultDelta !== 0) {
                 return defaultDelta;
@@ -1981,6 +2036,11 @@ WHERE { ${deletePatterns.join(' ')} }
     isTruthyValue(value) {
         return value === true || value === 'true' || value === 1 || value === '1';
     }
+    isDeploymentCredential(id) {
+        const deployment = this.deployment?.trim().toLowerCase();
+        const value = typeof id === 'string' ? id.trim().toLowerCase() : '';
+        return Boolean(deployment && value.startsWith(`${deployment}-`));
+    }
     timestampValue(value) {
         if (value instanceof Date) {
             return value.getTime();
@@ -2028,11 +2088,15 @@ WHERE { ${deletePatterns.join(' ')} }
       PREFIX cred: <https://vocab.xpod.dev/credential#>
       PREFIX ai: <https://vocab.xpod.dev/ai#>
       PREFIX udfs: <https://undefineds.co/ns#>
-      SELECT ?cred ?provider ?apiKey ?isDefault ?lastUsedAt ?failCount ?providerBaseUrl ?credentialBaseUrl ?providerProxyUrl ?credentialProxyUrl ?defaultModel ?hasModel
+      SELECT ?cred ?provider ?apiKey ?encryptedSecret ?secretPayload ?storageMode ?metadata ?isDefault ?lastUsedAt ?failCount ?providerBaseUrl ?credentialBaseUrl ?providerProxyUrl ?credentialProxyUrl ?defaultModel ?hasModel
       WHERE {
         ?cred (cred:service|udfs:service) "ai" ;
-              (cred:status|udfs:status) "active" ;
-              (cred:apiKey|udfs:apiKey) ?apiKey .
+              (cred:status|udfs:status) "active" .
+        OPTIONAL { ?cred (cred:apiKey|udfs:apiKey) ?apiKey . }
+        OPTIONAL { ?cred (cred:encryptedSecret|udfs:encryptedSecret) ?encryptedSecret . }
+        OPTIONAL { ?cred (cred:secretPayload|udfs:secretPayload) ?secretPayload . }
+        OPTIONAL { ?cred (cred:storageMode|udfs:storageMode) ?storageMode . }
+        OPTIONAL { ?cred (cred:metadata|udfs:metadata) ?metadata . }
         OPTIONAL { ?cred (cred:provider|udfs:provider) ?provider . }
         OPTIONAL { ?cred (cred:isDefault|udfs:isDefault) ?isDefault . }
         OPTIONAL { ?cred (cred:lastUsedAt|udfs:lastUsedAt) ?lastUsedAt . }
@@ -2061,11 +2125,17 @@ WHERE { ${deletePatterns.join(' ')} }
         const credentials = (json.results?.bindings ?? []).map((binding) => {
             const credentialIri = this.parseSparqlBindingValue(binding, 'cred') ?? '';
             const providerRef = this.parseSparqlBindingValue(binding, 'provider');
+            const metadata = this.parseMetadataValue(this.parseSparqlBindingValue(binding, 'metadata') ?? undefined);
             return {
                 id: this.baseRelativeIdFromPodPath(credentialIri, context, '/settings/'),
+                credentialIri,
                 provider: providerRef,
                 providerId: providerRef ? this.extractProviderId(providerRef) : null,
                 apiKey: this.parseSparqlBindingValue(binding, 'apiKey'),
+                encryptedSecret: this.parseSparqlBindingValue(binding, 'encryptedSecret'),
+                secretPayload: this.parseSparqlBindingValue(binding, 'secretPayload'),
+                storageMode: this.parseSparqlBindingValue(binding, 'storageMode'),
+                enabled: this.credentialEnabledFromMetadata(metadata),
                 isDefault: this.parseSparqlBindingValue(binding, 'isDefault'),
                 lastUsedAt: this.parseSparqlBindingValue(binding, 'lastUsedAt'),
                 failCount: this.parseIntegerValue(this.parseSparqlBindingValue(binding, 'failCount')),
@@ -2078,25 +2148,74 @@ WHERE { ${deletePatterns.join(' ')} }
             };
         });
         for (const cred of this.sortAiCredentialCandidates(credentials)) {
-            if (!cred.provider || !cred.apiKey || !cred.baseUrl) {
+            if (!cred.provider || !cred.baseUrl || cred.enabled === false) {
                 continue;
             }
             const providerId = cred.providerId || this.extractProviderId(cred.provider);
             if (!providerId) {
                 continue;
             }
+            const secret = await this.resolveCredentialSecret(cred, context, providerId);
+            const apiKey = (0, AiCredentialSecret_1.providerTokenFromSecret)(secret) ?? cred.apiKey;
+            if (!apiKey) {
+                continue;
+            }
             this.logger.debug(`Using credential ${cred.id} with provider ${providerId}`);
             return {
                 providerId,
                 baseUrl: cred.baseUrl,
                 proxyUrl: cred.proxyUrl || undefined,
                 defaultModel: this.extractModelId(cred.defaultModel),
-                apiKey: cred.apiKey,
+                apiKey,
                 credentialId: cred.id,
             };
         }
         return undefined;
     }
+    /**
+     * AI Connections stores the secret in `encryptedSecret`; older rows carry a
+     * bare `apiKey`. Resolve whichever the row has, so a key entered once is usable
+     * by chat and by embedding/indexing alike.
+     */
+    async resolveCredentialSecret(row, context, providerId) {
+        const rowIri = row.credentialIri;
+        const credentialIri = typeof rowIri === 'string' && rowIri
+            ? rowIri
+            : this.resolvePodResource(context, `settings/credentials.ttl#${(0, models_1.normalizeAIConfigResourceId)(String(row.id ?? ''))}`);
+        try {
+            const secret = await this.credentialSecretDecoder(row, {
+                webId: typeof context.webId === 'string' ? context.webId : '',
+                credentialIri,
+                provider: providerId,
+            });
+            return secret;
+        }
+        catch (error) {
+            this.logger.warn(`Failed to read AI credential secret ${String(row.id)}: ${error}`);
+            return undefined;
+        }
+    }
+    credentialEnabledFromMetadata(metadata) {
+        const enabled = metadata?.enabled;
+        return typeof enabled === 'boolean' ? enabled : undefined;
+    }
+    parseMetadataValue(value) {
+        if (value && typeof value === 'object' && !Array.isArray(value)) {
+            return value;
+        }
+        if (typeof value !== 'string' || !value.trim()) {
+            return undefined;
+        }
+        try {
+            const parsed = JSON.parse(value);
+            return parsed && typeof parsed === 'object' && !Array.isArray(parsed)
+                ? parsed
+                : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
     async getAiConfig(context) {
         const db = await this.getDb(context);
         if (!db) {
@@ -2124,6 +2243,8 @@ WHERE { ${deletePatterns.join(' ')} }
             for (const cred of this.sortAiCredentialCandidates(credentials)) {
                 if (!cred.provider)
                     continue;
+                if (this.credentialEnabledFromMetadata(this.parseMetadataValue(cred.metadata)) === false)
+                    continue;
                 const provider = await this.findProviderForCredential(db, context, cred.provider);
                 if (!provider)
                     continue;
@@ -2131,12 +2252,15 @@ WHERE { ${deletePatterns.join(' ')} }
                 const baseUrl = provider.baseUrl || (0, defaultEmbeddingProfile_1.defaultBaseUrlForProvider)(providerId);
                 if (!baseUrl)
                     continue;
+                const secret = await this.resolveCredentialSecret({ ...cred, credentialIri: cred.id }, context, providerId);
+                const apiKey = (0, AiCredentialSecret_1.providerTokenFromSecret)(secret);
+                if (!apiKey)
+                    continue;
                 const defaultModelRef = provider.defaultModel ?? provider.hasModel;
                 const defaultModel = defaultModelRef
                     ? (await db.findByIri(model_1.Model, defaultModelRef))?.id ?? undefined
                     : undefined;
-                const embeddingModel = await this.findConfiguredEmbeddingModel(db, providerId)
-                    ?? (0, defaultEmbeddingProfile_1.defaultEmbeddingModelForProvider)(providerId);
+                const embeddingModel = await this.resolveEmbeddingModel(db, providerId);
                 this.logger.debug(`Using credential ${cred.id} with provider ${providerId}`);
                 return {
                     providerId,
@@ -2144,7 +2268,7 @@ WHERE { ${deletePatterns.join(' ')} }
                     proxyUrl: provider.proxyUrl || undefined,
                     defaultModel,
                     embeddingModel,
-                    apiKey: cred.apiKey,
+                    apiKey,
                     credentialId: cred.id,
                 };
             }

package/dist/api/container/common.js

@@ -30,6 +30,7 @@ const PodGatewayAccessKeyRepository_1 = require("../ai-gateway/auth/PodGatewayAc
 const HostedPodDataAccess_1 = require("../ai-gateway/pod/HostedPodDataAccess");
 const AiGatewayService_1 = require("../ai-gateway/AiGatewayService");
 const PlaintextCredentialVault_1 = require("../ai-gateway/credentials/PlaintextCredentialVault");
+const AiCredentialSecretDecoder_1 = require("../ai-gateway/credentials/AiCredentialSecretDecoder");
 const connect_1 = require("../ai-gateway/connect");
 const LoopbackAuthorizationCallbackReceiver_1 = require("../ai-gateway/connect/LoopbackAuthorizationCallbackReceiver");
 const FileSessionImportAdapter_1 = require("../ai-gateway/connect/FileSessionImportAdapter");
@@ -277,10 +278,16 @@ function registerCommonServices(container) {
                 discoveryRegistry: (0, ProviderModelDiscoveryAdapters_1.createProviderModelDiscoveryAdapters)({ registry: gatewayProviderRegistry }),
                 modelsService: providerModelsService,
                 credentialVault: credentialVaultForConfig(config),
+                embeddingModelPolicy: cradle.embeddingModelPolicy,
             });
         }).singleton(),
-        gatewayRuntimeRegistry: (0, awilix_1.asFunction)(({ gatewayProviderRegistry, providerHttpTransport }) => {
-            return new ProviderRuntimeRegistry_1.ProviderRuntimeRegistry({ registry: gatewayProviderRegistry, transport: providerHttpTransport });
+        gatewayRuntimeRegistry: (0, awilix_1.asFunction)(({ config, gatewayProviderRegistry, providerHttpTransport }) => {
+            return new ProviderRuntimeRegistry_1.ProviderRuntimeRegistry({
+                registry: gatewayProviderRegistry,
+                transport: providerHttpTransport,
+                // A user-owned endpoint is a Local capability; Cloud uses the catalog's.
+                allowCredentialBaseUrl: config.edition === 'local',
+            });
         }).singleton(),
         gatewaySessionAffinityStore: (0, awilix_1.asFunction)(({ config }) => {
             // Session affinity secrets are process-local by default: a fresh random
@@ -306,6 +313,7 @@ function registerCommonServices(container) {
                 registry: gatewayProviderRegistry,
                 affinityStore: gatewaySessionAffinityStore,
                 credentials: gatewayCredentialStore.listCredentials.bind(gatewayCredentialStore),
+                embeddingModelPolicy: cradle.embeddingModelPolicy,
             });
             const cloudGatewayOrigin = (0, CloudGatewayModelsClient_1.resolveCloudModelsGatewayOrigin)({
                 edition: config.edition,
@@ -441,6 +449,8 @@ function registerCommonServices(container) {
                     internalPodAccess: cradle.hostedPodDataAccess,
                     podBaseUrlResolver: podBaseUrlResolver(cradle),
                 }),
+                embeddingModelPolicy: cradle.embeddingModelPolicy,
+                registry: cradle.gatewayProviderRegistry,
             });
         }).singleton(),
         authenticator: (0, awilix_1.asFunction)(({ nodeRepo, serviceTokenRepo, invocationTokenCodec, gatewayAccessKeyRepository, config, }) => {
@@ -505,6 +515,10 @@ function registerCommonServices(container) {
             return new chatkit_1.PodChatKitStore({
                 tokenEndpoint: config.cssTokenEndpoint,
                 serverGroupReconcilerService,
+                deployment: config.edition,
+                credentialSecretDecoder: (0, AiCredentialSecretDecoder_1.createAiCredentialSecretDecoder)({
+                    vault: credentialVaultForConfig(config),
+                }),
             });
         }).singleton(),
         clientReconcilerCoordinator: (0, awilix_1.asFunction)(({ config }) => {
@@ -634,8 +648,14 @@ function registerCommonServices(container) {
         providerRegistry: (0, awilix_1.asFunction)(() => {
             return new service_1.ProviderRegistryImpl();
         }).singleton(),
-        embeddingService: (0, awilix_1.asFunction)(({ providerRegistry }) => {
-            return new service_1.EmbeddingServiceImpl(providerRegistry);
+        embeddingModelPolicy: (0, awilix_1.asFunction)(({ config, gatewayProviderRegistry }) => {
+            return (0, service_1.createEmbeddingModelPolicy)({
+                deployment: config.edition,
+                catalog: (0, models_1.createGatewayEmbeddingModelCatalog)(gatewayProviderRegistry, config.edition),
+            });
+        }).singleton(),
+        embeddingService: (0, awilix_1.asFunction)(({ providerRegistry, embeddingModelPolicy }) => {
+            return new service_1.EmbeddingServiceImpl(providerRegistry, { policy: embeddingModelPolicy });
         }).singleton(),
         vectorService: (0, awilix_1.asFunction)(({ chatKitStore, embeddingService }) => {
             return new VectorService_1.VectorService({

package/dist/api/container/routes.js

@@ -260,6 +260,7 @@ function registerSharedRoutes(container, server) {
         podLookupRepository,
         store: aiConfigStore,
         lifecycle: aiConfigLifecycle,
+        embeddingModelPolicy: container.resolve('embeddingModelPolicy', { allowUnregistered: true }),
         capabilities: () => ({
             textBackends: config.edition === 'cloud' && config.sparqlEndpoint ? ['postgres-fts'] : [],
             vectorBackends: config.edition === 'cloud' && config.sparqlEndpoint ? ['pgvector'] : ['vec'],
@@ -449,13 +450,15 @@ function resolveLocalStorageProviderBaseUrl(config, env = process.env) {
 function registerLocalRoutes(container, server) {
     const config = container.resolve('config');
     (0, LinxCapabilitiesHandler_1.registerLinxCapabilitiesRoutes)(server);
+    // DDNS state (托管式 Local 模式). One manager answers both the DDNS status
+    // route and the admin reachability verdict, which must agree.
+    const ddnsManager = resolveDdnsManager(container);
     // Admin API (配置管理、重启)
     (0, AdminHandler_1.registerAdminRoutes)(server, {
         internalAdminAuthSecret: config.gatewayAdminProxyAuthSecret,
+        ddnsManager,
     });
-    // DDNS status (托管式 Local 模式)
     try {
-        const ddnsManager = container.resolve('ddnsManager', { allowUnregistered: true });
         (0, AdminDdnsHandler_1.registerAdminDdnsRoutes)(server, {
             ddnsManager,
             internalAdminAuthSecret: config.gatewayAdminProxyAuthSecret,
@@ -548,6 +551,18 @@ function readPositiveInteger(value) {
     const parsed = Number.parseInt(value, 10);
     return Number.isInteger(parsed) && parsed > 0 ? parsed : undefined;
 }
+/**
+ * The DDNS manager is optional: a node without `XPOD_NODE_TOKEN` registers no
+ * DDNS routes and reports its public route as unknowable rather than failed.
+ */
+function resolveDdnsManager(container) {
+    try {
+        return container.resolve('ddnsManager', { allowUnregistered: true });
+    }
+    catch {
+        return undefined;
+    }
+}
 function resolveNetworkEndpoint(config) {
     const configured = config.publicUrl
         ?? config.activeTunnelProfile?.publicUrl

package/dist/api/container/types.d.ts

@@ -25,7 +25,7 @@ import type { ChatKitService, AiProvider } from '../chatkit';
 import type { StoreContext } from '../chatkit/store';
 import type { PodChatKitStore } from '../chatkit/pod-store';
 import type { RuntimeHost } from '../../runtime/host/types';
-import type { ProviderRegistry, EmbeddingService } from '../../ai/service';
+import type { ProviderRegistry, EmbeddingService, EmbeddingModelPolicy } from '../../ai/service';
 import type { VectorService } from '../service/VectorService';
 import type { RdfSearchIndexingService } from '../service/RdfSearchIndexingService';
 import type { RdfSearchReconciliationRepository } from '../../search/RdfSearchReconciliationRepository';
@@ -239,6 +239,8 @@ export interface ApiContainerCradle {
     serverGroupReconcilerService: ServerGroupReconcilerService;
     providerRegistry: ProviderRegistry;
     embeddingService: EmbeddingService;
+    /** Deployment embedding policy: cloud only allows models the gateway catalog provides. */
+    embeddingModelPolicy: EmbeddingModelPolicy;
     vectorService: VectorService;
     rdfStorageStatsService: RdfStorageStatsService;
     ddnsRepo?: DdnsRepository;