@undefineds.co/xpod 0.4.11 → 0.4.12

package/dist/runtime/upgrade/UpgradeHandshake.js

@@ -0,0 +1,199 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebSocketKey = createWebSocketKey;
+exports.buildUpstreamUpgradeRequest = buildUpstreamUpgradeRequest;
+exports.parseUpgradeHandshakeResponse = parseUpgradeHandshakeResponse;
+exports.selectedProtocol = selectedProtocol;
+exports.isWebSocketUpgrade = isWebSocketUpgrade;
+exports.parseRequestedProtocols = parseRequestedProtocols;
+exports.writeUpgradeSocketBytes = writeUpgradeSocketBytes;
+exports.endUpgradeSocket = endUpgradeSocket;
+exports.writeUpgradeErrorResponse = writeUpgradeErrorResponse;
+exports.forwardedHeaderValues = forwardedHeaderValues;
+const node_crypto_1 = require("node:crypto");
+/**
+ * HTTP handshake helpers for the gateway's upgrade relay.
+ *
+ * Upgrade requests are relayed to the internal services byte-for-byte, so the
+ * relay has to build the upstream request itself (see `BunNativeUpgradeRelay`).
+ * Keeping the header rules here makes them unit-testable and keeps the HTTP
+ * semantics of the gateway in one place.
+ */
+/** RFC 7230 hop-by-hop headers: never forwarded to the next hop. */
+const HOP_BY_HOP_HEADERS = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+]);
+/**
+ * Headers that belong to a single WebSocket handshake on one hop. They are set
+ * by the relay (or by the WebSocket implementation) for the upstream hop and
+ * must not be copied from the client request.
+ */
+const HANDSHAKE_HEADERS = new Set([
+    'sec-websocket-accept',
+    'sec-websocket-extensions',
+    'sec-websocket-key',
+    'sec-websocket-version',
+    // The relay never forwards a request body, so a content-length from the
+    // client must not make the upstream wait for one.
+    'content-length',
+]);
+function createWebSocketKey() {
+    return (0, node_crypto_1.randomBytes)(16).toString('base64');
+}
+/**
+ * Builds the raw HTTP upgrade request that is sent to the internal service.
+ * The client's `Host` and its application headers (authorization, cookies,
+ * origin, DPoP, custom `X-*`, ...) are forwarded unchanged so the internal
+ * server answers exactly as it would for a direct connection.
+ */
+function buildUpstreamUpgradeRequest(options) {
+    const headers = new Map();
+    for (const [name, value] of Object.entries(options.headers)) {
+        const lower = name.toLowerCase();
+        if (HOP_BY_HOP_HEADERS.has(lower) || HANDSHAKE_HEADERS.has(lower) || value === undefined) {
+            continue;
+        }
+        headers.set(lower, Array.isArray(value) ? value.join(', ') : String(value));
+    }
+    appendForwarded(headers, 'x-forwarded-for', options.forwardedFor);
+    appendForwarded(headers, 'x-forwarded-port', options.forwardedPort);
+    appendForwarded(headers, 'x-forwarded-proto', options.forwardedProto);
+    headers.set('upgrade', 'websocket');
+    headers.set('connection', 'Upgrade');
+    headers.set('sec-websocket-key', options.key ?? createWebSocketKey());
+    headers.set('sec-websocket-version', '13');
+    if (options.protocols.length > 0) {
+        headers.set('sec-websocket-protocol', options.protocols.join(', '));
+    }
+    const lines = [`GET ${options.path} HTTP/1.1`];
+    for (const [name, value] of headers) {
+        lines.push(`${name}: ${value}`);
+    }
+    lines.push('', '');
+    return Buffer.from(lines.join('\r\n'), 'latin1');
+}
+function appendForwarded(headers, name, value) {
+    if (!value) {
+        return;
+    }
+    const existing = headers.get(name);
+    headers.set(name, existing ? `${existing},${value}` : value);
+}
+/**
+ * Parses the beginning of the upstream upgrade response.
+ * @returns the parsed response, or `undefined` while the header block is incomplete.
+ */
+function parseUpgradeHandshakeResponse(buffer) {
+    const boundary = buffer.indexOf('\r\n\r\n');
+    if (boundary < 0) {
+        return undefined;
+    }
+    const headerBlock = buffer.subarray(0, boundary).toString('latin1');
+    const lines = headerBlock.split('\r\n');
+    const statusLine = lines.shift() ?? '';
+    const match = /^HTTP\/\d\.\d (\d{3}) ?(.*)$/.exec(statusLine);
+    if (!match) {
+        return undefined;
+    }
+    const headers = {};
+    for (const line of lines) {
+        const separator = line.indexOf(':');
+        if (separator <= 0) {
+            continue;
+        }
+        const name = line.slice(0, separator).trim().toLowerCase();
+        const value = line.slice(separator + 1).trim();
+        headers[name] = headers[name] ? `${headers[name]}, ${value}` : value;
+    }
+    return {
+        statusCode: Number(match[1]),
+        statusMessage: match[2] ?? '',
+        headers,
+        head: buffer.subarray(0, boundary + 4),
+        rest: buffer.subarray(boundary + 4),
+    };
+}
+/** Subprotocol selected by the upstream server, if any. */
+function selectedProtocol(response) {
+    const value = response.headers['sec-websocket-protocol'];
+    return value ? value.split(',')[0].trim() : '';
+}
+/** True when the upstream actually switched protocols to WebSocket. */
+function isWebSocketUpgrade(response) {
+    return response.statusCode === 101 && (response.headers.upgrade ?? '').toLowerCase() === 'websocket';
+}
+function parseRequestedProtocols(header) {
+    const value = Array.isArray(header) ? header.join(',') : header;
+    if (!value) {
+        return [];
+    }
+    return value.split(',').map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+}
+/**
+ * Writes raw bytes to a socket handed over by the HTTP server's `upgrade` event.
+ *
+ * Bun's `node:http` server hands the upgrade listener a socket shim whose
+ * `write()` never reaches the peer (`socket.write()` returns `true` and the
+ * bytes are dropped), which is why the gateway cannot use `http-proxy`'s
+ * WebSocket pass there. The underlying Bun socket handle still writes
+ * correctly, so error responses are written through it; on every other runtime
+ * the regular socket write is used.
+ */
+function writeUpgradeSocketBytes(socket, chunk) {
+    const handle = findBunSocketHandle(socket);
+    if (handle) {
+        handle.write(chunk);
+        return;
+    }
+    socket.write(chunk);
+}
+function endUpgradeSocket(socket) {
+    const handle = findBunSocketHandle(socket);
+    if (handle?.end) {
+        handle.end();
+        return;
+    }
+    socket.end();
+}
+function findBunSocketHandle(socket) {
+    for (const symbol of Object.getOwnPropertySymbols(socket)) {
+        if (symbol.description !== 'handle') {
+            continue;
+        }
+        const handle = socket[symbol];
+        if (handle && typeof handle.write === 'function') {
+            return handle;
+        }
+    }
+    return undefined;
+}
+/** Writes a complete HTTP response to an upgrade request that could not be relayed. */
+function writeUpgradeErrorResponse(socket, statusCode, statusMessage, headers, body) {
+    const payload = Buffer.from(body, 'utf8');
+    const lines = [`HTTP/1.1 ${statusCode} ${statusMessage}`];
+    for (const [name, value] of Object.entries(headers)) {
+        lines.push(`${name}: ${value}`);
+    }
+    lines.push(`Content-Length: ${payload.length}`, 'Connection: close', '', '');
+    writeUpgradeSocketBytes(socket, Buffer.concat([Buffer.from(lines.join('\r\n'), 'latin1'), payload]));
+    endUpgradeSocket(socket);
+}
+/** Best-effort `X-Forwarded-*` values matching `http-proxy`'s `xfwd: true`. */
+function forwardedHeaderValues(req) {
+    const host = Array.isArray(req.headers.host) ? req.headers.host[0] : req.headers.host;
+    const port = host?.match(/:(\d+)/)?.[1];
+    const encrypted = Boolean(req.socket.encrypted);
+    return {
+        forwardedFor: req.socket.remoteAddress,
+        forwardedPort: port ?? (encrypted ? '443' : '80'),
+        forwardedProto: encrypted ? 'wss' : 'ws',
+    };
+}
+//# sourceMappingURL=UpgradeHandshake.js.map

package/dist/runtime/upgrade/WebSocketFrames.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Minimal RFC 6455 frame codec used by the gateway's native (Bun) WebSocket
+ * upgrade relay.
+ *
+ * The gateway only needs it on runtimes whose HTTP server cannot hand the raw
+ * upgraded socket back to JavaScript (see `BunNativeUpgradeRelay`): there the
+ * client side is a native WebSocket (message level), while the upstream side is
+ * a raw socket, so frames have to be decoded/encoded in between.
+ *
+ * The codec deliberately implements a single, predictable flavour of the
+ * protocol: no extensions (the relay never offers `permessage-deflate`), no
+ * fragmentation on the outbound path (one frame per message) and a bounded
+ * inbound message size.
+ */
+export declare const WS_OPCODE: {
+    readonly continuation: 0;
+    readonly text: 1;
+    readonly binary: 2;
+    readonly close: 8;
+    readonly ping: 9;
+    readonly pong: 10;
+};
+export type WebSocketFrameOpcode = typeof WS_OPCODE[keyof typeof WS_OPCODE];
+/** Close code used when the peer violates the protocol. */
+export declare const WS_CLOSE_PROTOCOL_ERROR = 1002;
+/** Close code used when a message exceeds the configured size limit. */
+export declare const WS_CLOSE_MESSAGE_TOO_BIG = 1009;
+export interface EncodeWebSocketFrameOptions {
+    opcode: WebSocketFrameOpcode;
+    /** Client-to-server frames must be masked; server-to-client frames must not. */
+    mask: boolean;
+    /** Deterministic mask key, for tests only. */
+    maskKey?: Buffer;
+}
+export declare function encodeWebSocketFrame(payload: Buffer, options: EncodeWebSocketFrameOptions): Buffer;
+/** Encodes a close frame body (`code` + UTF-8 reason). */
+export declare function encodeWebSocketClosePayload(code: number, reason: string): Buffer;
+export interface WebSocketFrameSink {
+    /** A complete (possibly reassembled) data message. */
+    onMessage(payload: Buffer, isBinary: boolean): void;
+    onPing(payload: Buffer): void;
+    onPong(payload: Buffer): void;
+    onClose(code: number, reason: string): void;
+    /** The peer sent something that violates the protocol; the connection should be closed with 1002. */
+    onProtocolError(reason: string): void;
+}
+export interface WebSocketFrameParserOptions {
+    /** Upper bound for a single (reassembled) message; oversized messages raise a protocol error. */
+    maxMessageBytes?: number;
+}
+export declare class WebSocketFrameParser {
+    private readonly sink;
+    private buffer;
+    private fragmentOpcode;
+    private fragments;
+    private fragmentBytes;
+    private failed;
+    private readonly maxMessageBytes;
+    constructor(sink: WebSocketFrameSink, options?: WebSocketFrameParserOptions);
+    push(chunk: Buffer): void;
+    private fail;
+    /** @returns whether a complete frame was consumed. */
+    private parseFrame;
+    private handleFrame;
+    private appendFragment;
+    private completeMessage;
+}

package/dist/runtime/upgrade/WebSocketFrames.js

@@ -0,0 +1,224 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebSocketFrameParser = exports.WS_CLOSE_MESSAGE_TOO_BIG = exports.WS_CLOSE_PROTOCOL_ERROR = exports.WS_OPCODE = void 0;
+exports.encodeWebSocketFrame = encodeWebSocketFrame;
+exports.encodeWebSocketClosePayload = encodeWebSocketClosePayload;
+const node_crypto_1 = require("node:crypto");
+/**
+ * Minimal RFC 6455 frame codec used by the gateway's native (Bun) WebSocket
+ * upgrade relay.
+ *
+ * The gateway only needs it on runtimes whose HTTP server cannot hand the raw
+ * upgraded socket back to JavaScript (see `BunNativeUpgradeRelay`): there the
+ * client side is a native WebSocket (message level), while the upstream side is
+ * a raw socket, so frames have to be decoded/encoded in between.
+ *
+ * The codec deliberately implements a single, predictable flavour of the
+ * protocol: no extensions (the relay never offers `permessage-deflate`), no
+ * fragmentation on the outbound path (one frame per message) and a bounded
+ * inbound message size.
+ */
+exports.WS_OPCODE = {
+    continuation: 0x0,
+    text: 0x1,
+    binary: 0x2,
+    close: 0x8,
+    ping: 0x9,
+    pong: 0xa,
+};
+/** Close code used when the peer violates the protocol. */
+exports.WS_CLOSE_PROTOCOL_ERROR = 1002;
+/** Close code used when a message exceeds the configured size limit. */
+exports.WS_CLOSE_MESSAGE_TOO_BIG = 1009;
+function encodeWebSocketFrame(payload, options) {
+    const { opcode, mask } = options;
+    const length = payload.length;
+    const lengthBytes = length < 126 ? 1 : length <= 0xffff ? 3 : 9;
+    const maskBytes = mask ? 4 : 0;
+    const frame = Buffer.allocUnsafe(1 + lengthBytes + maskBytes + length);
+    frame[0] = 0x80 | opcode;
+    let offset;
+    if (length < 126) {
+        frame[1] = (mask ? 0x80 : 0) | length;
+        offset = 2;
+    }
+    else if (length <= 0xffff) {
+        frame[1] = (mask ? 0x80 : 0) | 126;
+        frame.writeUInt16BE(length, 2);
+        offset = 4;
+    }
+    else {
+        frame[1] = (mask ? 0x80 : 0) | 127;
+        frame.writeBigUInt64BE(BigInt(length), 2);
+        offset = 10;
+    }
+    if (!mask) {
+        payload.copy(frame, offset);
+        return frame;
+    }
+    const maskKey = options.maskKey ?? (0, node_crypto_1.randomBytes)(4);
+    maskKey.copy(frame, offset);
+    for (let index = 0; index < length; index++) {
+        frame[offset + 4 + index] = payload[index] ^ maskKey[index % 4];
+    }
+    return frame;
+}
+/** Encodes a close frame body (`code` + UTF-8 reason). */
+function encodeWebSocketClosePayload(code, reason) {
+    const reasonBytes = Buffer.from(reason, 'utf8');
+    const payload = Buffer.allocUnsafe(2 + reasonBytes.length);
+    payload.writeUInt16BE(code, 0);
+    reasonBytes.copy(payload, 2);
+    return payload;
+}
+const DEFAULT_MAX_MESSAGE_BYTES = 64 * 1024 * 1024;
+class WebSocketFrameParser {
+    constructor(sink, options = {}) {
+        this.sink = sink;
+        this.buffer = Buffer.alloc(0);
+        this.fragments = [];
+        this.fragmentBytes = 0;
+        this.failed = false;
+        this.maxMessageBytes = options.maxMessageBytes ?? DEFAULT_MAX_MESSAGE_BYTES;
+    }
+    push(chunk) {
+        if (this.failed || chunk.length === 0) {
+            return;
+        }
+        this.buffer = this.buffer.length === 0 ? chunk : Buffer.concat([this.buffer, chunk]);
+        while (!this.failed && this.parseFrame()) {
+            // Keep consuming buffered frames.
+        }
+    }
+    fail(reason) {
+        this.failed = true;
+        this.buffer = Buffer.alloc(0);
+        this.fragments = [];
+        this.fragmentOpcode = undefined;
+        this.sink.onProtocolError(reason);
+    }
+    /** @returns whether a complete frame was consumed. */
+    parseFrame() {
+        const buffer = this.buffer;
+        if (buffer.length < 2) {
+            return false;
+        }
+        const fin = (buffer[0] & 0x80) !== 0;
+        const reserved = buffer[0] & 0x70;
+        const opcode = (buffer[0] & 0x0f);
+        const masked = (buffer[1] & 0x80) !== 0;
+        let payloadLength = buffer[1] & 0x7f;
+        let offset = 2;
+        if (reserved !== 0) {
+            this.fail('reserved frame bits set without a negotiated extension');
+            return false;
+        }
+        if (payloadLength === 126) {
+            if (buffer.length < offset + 2) {
+                return false;
+            }
+            payloadLength = buffer.readUInt16BE(offset);
+            offset += 2;
+        }
+        else if (payloadLength === 127) {
+            if (buffer.length < offset + 8) {
+                return false;
+            }
+            const big = buffer.readBigUInt64BE(offset);
+            if (big > BigInt(Number.MAX_SAFE_INTEGER)) {
+                this.fail('frame payload length is out of range');
+                return false;
+            }
+            payloadLength = Number(big);
+            offset += 8;
+        }
+        const isControl = (opcode & 0x8) !== 0;
+        if (isControl && (!fin || payloadLength > 125)) {
+            this.fail('invalid control frame');
+            return false;
+        }
+        const maskBytes = masked ? 4 : 0;
+        if (payloadLength > this.maxMessageBytes || this.fragmentBytes + payloadLength > this.maxMessageBytes) {
+            this.fail('message exceeds the configured size limit');
+            return false;
+        }
+        if (buffer.length < offset + maskBytes + payloadLength) {
+            return false;
+        }
+        const maskKey = masked ? buffer.subarray(offset, offset + 4) : undefined;
+        offset += maskBytes;
+        const payload = Buffer.from(buffer.subarray(offset, offset + payloadLength));
+        this.buffer = buffer.subarray(offset + payloadLength);
+        if (maskKey) {
+            for (let index = 0; index < payload.length; index++) {
+                payload[index] = payload[index] ^ maskKey[index % 4];
+            }
+        }
+        this.handleFrame(fin, opcode, payload);
+        return !this.failed;
+    }
+    handleFrame(fin, opcode, payload) {
+        switch (opcode) {
+            case exports.WS_OPCODE.continuation:
+                if (this.fragmentOpcode === undefined) {
+                    this.fail('continuation frame without a started message');
+                    return;
+                }
+                this.appendFragment(payload);
+                if (fin) {
+                    this.completeMessage();
+                }
+                return;
+            case exports.WS_OPCODE.text:
+            case exports.WS_OPCODE.binary:
+                if (this.fragmentOpcode !== undefined) {
+                    this.fail('new data frame while a fragmented message is in progress');
+                    return;
+                }
+                this.fragmentOpcode = opcode;
+                this.appendFragment(payload);
+                if (fin) {
+                    this.completeMessage();
+                }
+                return;
+            case exports.WS_OPCODE.close: {
+                if (payload.length === 1) {
+                    this.fail('close frame with a 1 byte payload');
+                    return;
+                }
+                // The close frame ends the data stream: nothing after it is dispatched.
+                this.failed = true;
+                this.buffer = Buffer.alloc(0);
+                this.sink.onClose(payload.length === 0 ? 1005 : payload.readUInt16BE(0), payload.subarray(2).toString('utf8'));
+                return;
+            }
+            case exports.WS_OPCODE.ping:
+                this.sink.onPing(payload);
+                return;
+            case exports.WS_OPCODE.pong:
+                this.sink.onPong(payload);
+                return;
+            default:
+                this.fail(`unsupported opcode ${opcode}`);
+        }
+    }
+    appendFragment(payload) {
+        this.fragmentBytes += payload.length;
+        if (this.fragmentBytes > this.maxMessageBytes) {
+            this.fail('message exceeds the configured size limit');
+            return;
+        }
+        this.fragments.push(payload);
+    }
+    completeMessage() {
+        const opcode = this.fragmentOpcode;
+        const fragments = this.fragments;
+        this.fragmentOpcode = undefined;
+        this.fragments = [];
+        this.fragmentBytes = 0;
+        const payload = fragments.length === 1 ? fragments[0] : Buffer.concat(fragments);
+        this.sink.onMessage(payload, opcode === exports.WS_OPCODE.binary);
+    }
+}
+exports.WebSocketFrameParser = WebSocketFrameParser;
+//# sourceMappingURL=WebSocketFrames.js.map

package/node_modules/@undefineds.co/ai-connections/dist/AiApiKeyPool.js

@@ -4,6 +4,7 @@ import { Button, Input, cn } from '@undefineds.co/shared-ui';
 import { ExternalLink, Eye, EyeOff, KeyRound, Loader2, LogOut, Plus, RotateCw } from 'lucide-react';
 import { normalizeProxyUrl } from './ai-connections-client.js';
 import { offeringTitle } from './offering-label.js';
+import { authorizationMethodsForOffering, isApiKeyMethod } from './authorization-methods.js';
 import { nextCredentialPriority } from './credential-labels.js';
 import { offeringEndpoint } from './offering-endpoints.js';
 export function AiApiKeyPool({ definition, offering, createOfferings, status, credentials, attempt, apiKey, baseUrl, busy, disabled, error, onApiKeyChange, onBaseUrlChange, onBeginApiKey, onBeginBrowser, onSaveApiKey, onDisconnect, onCreateApiKeyCredential, onUpdateCredential, initialEditing, initialCreate = false, onSavingChange, onCloseEdit, }) {
@@ -11,6 +12,12 @@ export function AiApiKeyPool({ definition, offering, createOfferings, status, cr
     const isConfigured = status === 'configured';
     const isConnected = status === 'connected';
     const hasPoolActions = Boolean(onCreateApiKeyCredential);
+    /**
+     * The legacy no-pool toolbar names its browser entry from the offering's own
+     * methods, like every other connect action. An api-key-only offering declares
+     * none, so that toolbar shows no browser button at all.
+     */
+    const browserMethod = authorizationMethodsForOffering(offering).find((method) => !isApiKeyMethod(method));
     const [createOfferingId, setCreateOfferingId] = useState(offering.id);
     const formOffering = createOfferings.find((item) => item.id === createOfferingId) ?? offering;
     const [showKey, setShowKey] = useState(false);
@@ -115,7 +122,7 @@ export function AiApiKeyPool({ definition, offering, createOfferings, status, cr
             }
         }
     };
-    return (_jsxs("div", { className: cn('space-y-3', formMode && 'w-full'), children: [attempt?.userCode ? (_jsxs("div", { className: "border-l-2 border-primary bg-muted/30 px-3 py-2 text-sm", children: ["\u9A8C\u8BC1\u7801\uFF1A", _jsx("strong", { className: "font-mono", children: attempt.userCode })] })) : null, !initialCreate && !initialEditing ? _jsxs("div", { className: "flex flex-wrap gap-2", children: [onCreateApiKeyCredential && createOfferings.length > 0 ? (_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: openCreateForm, children: [_jsx(Plus, { className: "mr-2 h-4 w-4" }), "\u6DFB\u52A0 API Key"] })) : null, hasPoolActions ? null : isConnected ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(RotateCw, { className: "mr-2 h-4 w-4" }), "\u91CD\u65B0\u8FDE\u63A5"] }), _jsxs(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: [_jsx(LogOut, { className: "mr-2 h-4 w-4" }), "\u65AD\u5F00\u8FDE\u63A5"] })] })) : isConfigured ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", "aria-label": "\u66F4\u65B0 API Key", disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u66F4\u65B0 API Key"] }), _jsx(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: "\u79FB\u9664\u914D\u7F6E" })] })) : (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving || definition.browserMode === 'connectUnsupported', onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(ExternalLink, { className: "mr-2 h-4 w-4" }), definition.browserLabel] }), _jsxs(Button, { variant: "outline", size: "sm", "aria-label": `${definition.name} API Key`, disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u914D\u7F6E API Key"] })] }))] }) : null, formMode ? (_jsxs("div", { className: "space-y-2 rounded-lg border border-border/50 bg-muted/10 p-3", children: [formMode === 'create' && createOfferings.length > 1 ? (_jsxs("label", { className: "block space-y-1 text-xs text-muted-foreground", children: [_jsx("span", { children: "\u5957\u9910 / \u533A\u57DF" }), _jsx("select", { "aria-label": `${definition.name} 套餐 / 区域`, value: createOfferingId, disabled: busy || disabled || saving, onChange: (event) => { setCreateOfferingId(event.target.value); setPoolFormError(undefined); }, className: "h-9 w-full rounded-md border border-input bg-background px-3 text-sm text-foreground", children: createOfferings.map((item) => _jsx("option", { value: item.id, children: offeringTitle(item) }, item.id)) })] })) : null, formMode === 'edit' ? (_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "aria-label": `${definition.name} API Key 标签`, placeholder: "\u540D\u79F0\uFF0C\u4F8B\u5982 Work key", value: poolLabel, onChange: (event) => setPoolLabel(event.target.value) })) : null, formMode === 'create' ? (_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: poolApiKey, onChange: (event) => setPoolApiKey(event.target.value), className: "font-mono" })) : null, formMode === 'edit' || showAdvanced ? (_jsxs(_Fragment, { children: [_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Base URL 输入`, placeholder: offeringEndpoint(formMode === 'edit' ? offering : formOffering) || definition.defaultBaseUrl || '默认服务地址', value: poolBaseUrl, onChange: (event) => setPoolBaseUrl(event.target.value), className: "font-mono text-xs" }), _jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Proxy URL 输入`, placeholder: "http://127.0.0.1:7890", value: poolProxyUrl, onChange: (event) => setPoolProxyUrl(event.target.value), className: "font-mono text-xs" })] })) : null, poolFormError ? _jsx("p", { className: "text-xs text-destructive", children: poolFormError }) : null, _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx(Button, { size: "sm", "aria-label": formMode === 'create' ? `保存 ${definition.name} API Key` : '保存凭证', disabled: busy || disabled || saving || (formMode === 'create' && !poolApiKey.trim()), onClick: savePoolForm, children: formMode === 'create' ? '保存 API Key' : '保存凭证' }), _jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: closePoolForm, children: "\u53D6\u6D88" }), formMode === 'create' ? (_jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: () => setShowAdvanced((current) => !current), children: showAdvanced ? '收起高级设置' : '高级设置' })) : null] })] })) : null, apiKeyAttempt && !formMode ? (_jsxs("div", { className: "space-y-2", children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsx("span", { className: "text-sm font-medium", children: "API Key" }), definition.apiKeyUrl ? (_jsx("a", { href: definition.apiKeyUrl, target: "_blank", rel: "noreferrer", className: "text-xs text-primary hover:underline", children: "\u83B7\u53D6 API Key" })) : null] }), _jsxs("div", { className: "group relative", children: [_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: apiKey, onChange: (event) => onApiKeyChange(event.target.value), className: "border-border/60 bg-muted/20 pr-10 font-mono transition-colors focus:border-primary/50 focus:bg-background" }), _jsx("div", { className: "absolute bottom-1 right-1 top-1 flex items-center", children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-full w-8 rounded hover:bg-muted", onClick: () => setShowKey((current) => !current), "aria-label": showKey ? '隐藏 API Key' : '显示 API Key', children: showKey
+    return (_jsxs("div", { className: cn('space-y-3', formMode && 'w-full'), children: [attempt?.userCode ? (_jsxs("div", { className: "border-l-2 border-primary bg-muted/30 px-3 py-2 text-sm", children: ["\u9A8C\u8BC1\u7801\uFF1A", _jsx("strong", { className: "font-mono", children: attempt.userCode })] })) : null, !initialCreate && !initialEditing ? _jsxs("div", { className: "flex flex-wrap gap-2", children: [onCreateApiKeyCredential && createOfferings.length > 0 ? (_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: openCreateForm, children: [_jsx(Plus, { className: "mr-2 h-4 w-4" }), "\u6DFB\u52A0 API Key"] })) : null, hasPoolActions ? null : isConnected ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(RotateCw, { className: "mr-2 h-4 w-4" }), "\u91CD\u65B0\u8FDE\u63A5"] }), _jsxs(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: [_jsx(LogOut, { className: "mr-2 h-4 w-4" }), "\u65AD\u5F00\u8FDE\u63A5"] })] })) : isConfigured ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", "aria-label": "\u66F4\u65B0 API Key", disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u66F4\u65B0 API Key"] }), _jsx(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: "\u79FB\u9664\u914D\u7F6E" })] })) : (_jsxs(_Fragment, { children: [browserMethod ? (_jsxs(Button, { variant: "outline", size: "sm", title: browserMethod.lifecycle === 'unavailable' ? browserMethod.reason : undefined, disabled: busy || disabled || saving || browserMethod.lifecycle === 'unavailable', onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(ExternalLink, { className: "mr-2 h-4 w-4" }), browserMethod.label] })) : null, _jsxs(Button, { variant: "outline", size: "sm", "aria-label": `${definition.name} API Key`, disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u914D\u7F6E API Key"] })] }))] }) : null, formMode ? (_jsxs("div", { className: "space-y-2 rounded-lg border border-border/50 bg-muted/10 p-3", children: [formMode === 'create' && createOfferings.length > 1 ? (_jsxs("label", { className: "block space-y-1 text-xs text-muted-foreground", children: [_jsx("span", { children: "\u5957\u9910 / \u533A\u57DF" }), _jsx("select", { "aria-label": `${definition.name} 套餐 / 区域`, value: createOfferingId, disabled: busy || disabled || saving, onChange: (event) => { setCreateOfferingId(event.target.value); setPoolFormError(undefined); }, className: "h-9 w-full rounded-md border border-input bg-background px-3 text-sm text-foreground", children: createOfferings.map((item) => _jsx("option", { value: item.id, children: offeringTitle(item) }, item.id)) })] })) : null, formMode === 'edit' ? (_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "aria-label": `${definition.name} API Key 标签`, placeholder: "\u540D\u79F0\uFF0C\u4F8B\u5982 Work key", value: poolLabel, onChange: (event) => setPoolLabel(event.target.value) })) : null, formMode === 'create' ? (_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: poolApiKey, onChange: (event) => setPoolApiKey(event.target.value), className: "font-mono" })) : null, formMode === 'edit' || showAdvanced ? (_jsxs(_Fragment, { children: [_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Base URL 输入`, placeholder: offeringEndpoint(formMode === 'edit' ? offering : formOffering) || definition.defaultBaseUrl || '默认服务地址', value: poolBaseUrl, onChange: (event) => setPoolBaseUrl(event.target.value), className: "font-mono text-xs" }), _jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Proxy URL 输入`, placeholder: "http://127.0.0.1:7890", value: poolProxyUrl, onChange: (event) => setPoolProxyUrl(event.target.value), className: "font-mono text-xs" })] })) : null, poolFormError ? _jsx("p", { className: "text-xs text-destructive", children: poolFormError }) : null, _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx(Button, { size: "sm", "aria-label": formMode === 'create' ? `保存 ${definition.name} API Key` : '保存凭证', disabled: busy || disabled || saving || (formMode === 'create' && !poolApiKey.trim()), onClick: savePoolForm, children: formMode === 'create' ? '保存 API Key' : '保存凭证' }), _jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: closePoolForm, children: "\u53D6\u6D88" }), formMode === 'create' ? (_jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: () => setShowAdvanced((current) => !current), children: showAdvanced ? '收起高级设置' : '高级设置' })) : null] })] })) : null, apiKeyAttempt && !formMode ? (_jsxs("div", { className: "space-y-2", children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsx("span", { className: "text-sm font-medium", children: "API Key" }), definition.apiKeyUrl ? (_jsx("a", { href: definition.apiKeyUrl, target: "_blank", rel: "noreferrer", className: "text-xs text-primary hover:underline", children: "\u83B7\u53D6 API Key" })) : null] }), _jsxs("div", { className: "group relative", children: [_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: apiKey, onChange: (event) => onApiKeyChange(event.target.value), className: "border-border/60 bg-muted/20 pr-10 font-mono transition-colors focus:border-primary/50 focus:bg-background" }), _jsx("div", { className: "absolute bottom-1 right-1 top-1 flex items-center", children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-full w-8 rounded hover:bg-muted", onClick: () => setShowKey((current) => !current), "aria-label": showKey ? '隐藏 API Key' : '显示 API Key', children: showKey
                                         ? _jsx(EyeOff, { className: "h-4 w-4 text-muted-foreground" })
                                         : _jsx(Eye, { className: "h-4 w-4 text-muted-foreground" }) }) })] }), onBaseUrlChange ? (_jsxs("div", { className: "space-y-1.5", children: [_jsx("span", { className: "text-xs font-medium text-muted-foreground", children: "Base URL\uFF08\u9009\u586B\uFF09" }), _jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Base URL 输入`, placeholder: definition.defaultBaseUrl || '默认服务地址', value: baseUrl, onChange: (event) => onBaseUrlChange(event.target.value), className: "border-border/60 bg-muted/20 font-mono text-xs transition-colors focus:border-primary/50 focus:bg-background" }), _jsxs("p", { className: "break-all font-mono text-[11px] text-muted-foreground opacity-80", children: [_jsx("span", { className: "mr-1 select-none opacity-50", children: "\u9884\u89C8:" }), (baseUrl.trim() || definition.defaultBaseUrl || '').replace(/\/+$/, ''), "/chat/completions"] })] })) : null, _jsx(Button, { size: "sm", "aria-label": `保存 ${definition.name} API Key`, disabled: !apiKey.trim() || busy || disabled, onClick: onSaveApiKey, children: "\u4FDD\u5B58 API Key" })] })) : null, error ? _jsx("p", { className: "text-sm text-destructive", children: error }) : null] }));
 }

package/node_modules/@undefineds.co/ai-connections/dist/AiAuthorizationActions.d.ts

@@ -1,8 +1,17 @@
 import type { AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderOffering } from './ai-connections-client';
-export declare function AiAuthorizationActions({ methods, offering, hasCredentials, busy, disabled, onBeginOffering, onCreateLocalCredential, }: {
+/**
+ * The offering's own entries, one button per declared `authorizationMethod`.
+ *
+ * A method that is implemented but unavailable in this deployment still gets its
+ * button, greyed at the same spec as its neighbours so the row keeps one line,
+ * with the reason as its tooltip. Nothing explains itself in a second row: the
+ * entry's own state is the message, and a list of internal reasons underneath
+ * the row reflows the buttons around it. Methods this build has not implemented
+ * never reach here - the server omits them.
+ */
+export declare function AiAuthorizationActions({ methods, offering, busy, disabled, onBeginOffering, onCreateLocalCredential, }: {
     methods: AiProviderAuthorizationMethod[];
     offering: AiProviderOffering;
-    hasCredentials: boolean;
     busy: boolean;
     disabled: boolean;
     onBeginOffering?: (offering: AiProviderOffering, mode: AiConnectionsMode, method?: AiProviderAuthorizationMethod) => void;

package/node_modules/@undefineds.co/ai-connections/dist/AiAuthorizationActions.js

@@ -2,17 +2,34 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Button } from '@undefineds.co/shared-ui';
 import { ExternalLink, Loader2, Plus } from 'lucide-react';
 import { connectModeForMethod, isLocalMethod, isOAuthMode } from './authorization-methods.js';
-export function AiAuthorizationActions({ methods, offering, hasCredentials, busy, disabled, onBeginOffering, onCreateLocalCredential, }) {
+/**
+ * The offering's own entries, one button per declared `authorizationMethod`.
+ *
+ * A method that is implemented but unavailable in this deployment still gets its
+ * button, greyed at the same spec as its neighbours so the row keeps one line,
+ * with the reason as its tooltip. Nothing explains itself in a second row: the
+ * entry's own state is the message, and a list of internal reasons underneath
+ * the row reflows the buttons around it. Methods this build has not implemented
+ * never reach here - the server omits them.
+ */
+export function AiAuthorizationActions({ methods, offering, busy, disabled, onBeginOffering, onCreateLocalCredential, }) {
     if (methods.length === 0)
         return null;
-    return (_jsx("div", { className: "space-y-2", children: _jsx("div", { className: "flex flex-wrap gap-2", children: methods.map((method) => {
-                const connectMode = connectModeForMethod(method);
-                if (isOAuthMode(connectMode)) {
-                    return (_jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", disabled: busy || disabled || !onBeginOffering, onClick: () => onBeginOffering?.(offering, connectMode, method), children: [busy ? _jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" }) : _jsx(ExternalLink, { className: "h-3.5 w-3.5" }), method.label || (hasCredentials ? '添加账号' : '登录')] }, method.id));
-                }
-                if (isLocalMethod(method)) {
-                    return (_jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", title: "\u5BFC\u5165\u5F53\u524D\u8BBE\u5907\u5DF2\u6709\u767B\u5F55\u6001\uFF0C\u4E0D\u4F1A\u53D1\u8D77\u65B0\u7684\u6D4F\u89C8\u5668\u6388\u6743\u3002", disabled: busy || disabled || !onCreateLocalCredential, onClick: () => void onCreateLocalCredential?.(offering, method), children: [busy ? _jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" }) : _jsx(Plus, { className: "h-3.5 w-3.5" }), method.label || '已有登录态'] }, method.id));
-                }
+    return (_jsx("div", { className: "flex flex-wrap gap-2", children: methods.map((method) => {
+            const connectMode = connectModeForMethod(method);
+            const unavailable = method.lifecycle === 'unavailable';
+            // An entry without a label is not one the offering asked for; the
+            // button is named by the method itself, never by a provider default.
+            if (!method.label)
                 return null;
-            }) }) }));
+            if (isOAuthMode(connectMode)) {
+                return (_jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", title: unavailable ? method.reason : undefined, disabled: busy || disabled || unavailable || !onBeginOffering, onClick: () => onBeginOffering?.(offering, connectMode, method), children: [busy ? _jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" }) : _jsx(ExternalLink, { className: "h-3.5 w-3.5" }), method.label] }, method.id));
+            }
+            if (isLocalMethod(method)) {
+                return (_jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", title: unavailable
+                        ? method.reason
+                        : '导入当前设备已有登录态，不会发起新的浏览器授权。', disabled: busy || disabled || unavailable || !onCreateLocalCredential, onClick: () => void onCreateLocalCredential?.(offering, method), children: [busy ? _jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" }) : _jsx(Plus, { className: "h-3.5 w-3.5" }), method.label] }, method.id));
+            }
+            return null;
+        }) }));
 }

package/node_modules/@undefineds.co/ai-connections/dist/AiClientConfigurationSection.d.ts

@@ -1,4 +1,5 @@
 import type { AiClientConfigurationModel } from '@undefineds.co/extension-sdk/web';
+import { normalizeV1Endpoint } from './endpoint-urls';
 export declare const AI_CONNECTIONS_CLIENTS: readonly ["codex", "claude-code", "pi", "codebuddy"];
 export type AiConnectionsClientId = (typeof AI_CONNECTIONS_CLIENTS)[number];
 export interface AiClientConfigurationStatus {
@@ -68,4 +69,10 @@ export declare function AiClientConfigurationSection({ bridge, endpoint, client,
     compact?: boolean;
     onComplete?: () => void;
 }): import("react").JSX.Element;
+/**
+ * The OpenAI-compatible base a client is pointed at, derived from the Xpod URL.
+ * The rule itself is shared with the client-config adapters, so what a copied
+ * config claims and what the adapters write cannot drift apart.
+ */
+export declare const openAiCompatibleBaseUrl: typeof normalizeV1Endpoint;
 export declare function manualConfigurationText(client: AiConnectionsClientId, endpoint: string, apiKey?: string): string;