@undefineds.co/xpod 0.4.11 → 0.4.12

package/node_modules/@undefineds.co/extension-sdk/dist/web.d.ts

@@ -1,4 +1,6 @@
 import type { OpenPodRuntime, SolidSessionRuntime } from '@undefineds.co/solid-sdk';
+import type { PodModelDescriptor } from '@undefineds.co/models';
+import type { PodCollection, PodCollectionOptions, PodSyncState, RowOf } from '@undefineds.co/pod-collections';
 import { type ReactElement } from 'react';
 import { type AppletLayoutType, SinglePaneAppletLayoutDescriptor, ThreePaneAppletLayoutDescriptor, TwoPaneAppletLayoutDescriptor } from './layout';
 import type { AppletManifest, ExtensionManifest } from './manifest';
@@ -69,6 +71,19 @@ export interface AiClientConfigurationCapability {
 export interface AiConnectionsPodStore {
     listProviders(): Promise<unknown[]>;
     listModels?(): Promise<unknown[]>;
+    /**
+     * `settings/credentials.ttl`: the document credential rows live in, and
+     * therefore the live-update topic of the credentials table.
+     */
+    credentialsTableDocument?(): string;
+    /**
+     * The document a provider's own row and its model rows live in
+     * (`providers/<provider>.ttl`), and therefore that table's live-update topic.
+     *
+     * `instanceId` selects the document of a user-defined provider instance,
+     * which owns its own document; catalog providers ignore it.
+     */
+    providerTableDocument?(provider: string, instanceId?: string): string;
     createApiKeyCredential?(provider: string, input: {
         offeringId?: string;
         apiKey: string;
@@ -77,6 +92,16 @@ export interface AiConnectionsPodStore {
         proxyUrl?: string;
         priority?: number;
         compatibility?: 'auto' | 'openai' | 'anthropic';
+        /**
+         * The row this credential must be written at.
+         *
+         * A live collection creates the row optimistically from the models
+         * descriptor and then asks the store for the complete row at that id: the
+         * secret envelope and the columns the descriptor does not declare are the
+         * store's to write. The row already exists then, so the store updates it in
+         * place instead of inserting a second one. Omitted = create a new id.
+         */
+        id?: string;
     }): Promise<unknown>;
     createLocalCredential?(provider: string, input: {
         authorizationMethodId?: string;
@@ -84,6 +109,8 @@ export interface AiConnectionsPodStore {
         label?: string;
         baseUrl?: string;
         priority?: number;
+        /** See {@link AiConnectionsPodStore.createApiKeyCredential}. */
+        id?: string;
     }): Promise<unknown>;
     saveOAuthCredential?(provider: string, input: AiConnectionsOAuthCredential): Promise<unknown>;
     updateOAuthCredential?(provider: string, credentialId: string, expectedVersion: number, input: AiConnectionsOAuthCredential): Promise<unknown>;
@@ -182,6 +209,129 @@ export interface WebExtensionHostCapabilities {
     aiConnectionsPodStore?: AiConnectionsPodStore;
     /** Account-owned credentials; the applet never receives the Account session token. */
     aiClientCredentials?: AiClientCredentialsCapability;
+    /** Live updates for the Pod documents an applet is rendering. */
+    solidNotifications?: SolidNotificationsCapability;
+    /** Live Pod table collections; the applet declares the table, the host owns the I/O. */
+    podCollections?: PodCollectionsCapability;
+}
+/**
+ * Whether live Pod updates are reaching this page.
+ *
+ * `idle` covers "nothing is being watched", "still opening a channel" and
+ * "paused because the tab is hidden"; `live` means at least one watched
+ * document has an open channel; `unavailable` means live updates could not be
+ * established at all, so the page must keep working from explicit reads only.
+ */
+export type SolidLiveUpdateState = 'idle' | 'live' | 'unavailable';
+/**
+ * One dirty signal from a watched Pod table document.
+ *
+ * It carries delivery metadata only - never table data, and never an opinion
+ * about what the consumer should do with it. Conflict resolution, rollback,
+ * pending/confirmed row state and "server wins" reconciliation belong to the
+ * table consumer; this transport neither mutates nor interprets rows.
+ *
+ * A consumer that needs to tell a foreign change from the echo of its own write
+ * must correlate `receivedAt` with the write windows it tracks itself: applet
+ * writes do not travel through the notification channel, so the transport
+ * cannot know whether a local write was in flight and does not guess.
+ */
+export interface SolidLiveUpdateSignal {
+    /** The watched table document that changed. */
+    topic: string;
+    /** Per-topic delivery counter, starting at 1 and strictly increasing. */
+    sequence: number;
+    /** When this client received the signal, in epoch milliseconds. */
+    receivedAt: number;
+}
+/**
+ * Live updates for Pod table documents (Solid Notifications, WebSocketChannel2023).
+ *
+ * A table is one RDF document and that document is the topic; rows inside it are
+ * never separate subscriptions. A signal only says "this document changed", so
+ * the consumer re-reads through its own read path and coalesces bursts.
+ */
+export interface SolidNotificationsCapability {
+    /**
+     * Watch one table document.
+     *
+     * Listeners of the same topic share a single channel and a single socket; the
+     * returned function detaches this listener, and detaching the last one closes
+     * the socket and deletes the subscription. Watching a row IRI watches the
+     * document that holds the row.
+     *
+     * We are given a plain resource URL: which documents a page watches is the
+     * caller's decision, and no schema flag or registry declares it.
+     */
+    watch(topicUrl: string, listener: (signal: SolidLiveUpdateSignal) => void): () => void;
+    /** Current state, for a status affordance that stays out of the way. */
+    getState(): SolidLiveUpdateState;
+    /** Observe {@link SolidNotificationsCapability.getState}. */
+    subscribeState(listener: (state: SolidLiveUpdateState) => void): () => void;
+    /** Drops every subscription; called when the page that wanted them goes away. */
+    dispose(): void;
+}
+/**
+ * The declaration an applet hands to {@link PodCollectionsCapability.define}.
+ *
+ * Everything schema-shaped comes from the table's models descriptor and its
+ * drizzle table; the host fills in the I/O wiring (database, Pod URL, change
+ * feed), so an applet never names a document, a predicate or a refetch policy.
+ */
+export type PodCollectionHostRequest<D extends PodModelDescriptor> = Omit<PodCollectionOptions<D>, 'database' | 'podUrl' | 'feed'>;
+/**
+ * Live Pod table collections (`docs/pod-collections.md` §6.4).
+ *
+ * A table is declared once, by the applet that renders it, and the host turns
+ * that declaration into a live collection: reads land in the collection's own
+ * view of the table, writes are optimistic and roll back on rejection, and the
+ * host's change feed - the same notification primitive that drives
+ * {@link SolidNotificationsCapability} - refreshes it. No polling is installed.
+ */
+export interface PodCollectionsCapability {
+    /**
+     * The collection for one table, loading whatever the host needs first.
+     *
+     * This is the accessor a page should use. A host may keep the collection
+     * engine out of the page's initial bundle and fetch it on first use, so the
+     * only honest answer to "give me this table" is a promise: a host whose engine
+     * is already in memory answers on the next microtask, a deferring host answers
+     * once the engine is there.
+     *
+     * Optional so that an eager host - one whose engine is unconditionally loaded -
+     * needs nothing beyond {@link define}: a page falls back to `define` when this
+     * is absent.
+     */
+    load?<D extends PodModelDescriptor>(descriptor: D, request: PodCollectionHostRequest<D>): Promise<PodCollection<RowOf<D>>>;
+    /**
+     * The collection for one table.
+     *
+     * One `(descriptor.uri, document)` pair is one collection: defining the same
+     * table twice returns the same instance, so two pages of one applet share one
+     * sync engine and one subscription instead of racing two.
+     *
+     * A table whose document the descriptor cannot derive throws
+     * `layout_document_required`; the caller passes `document`/`scope` explicitly
+     * rather than guessing a layout.
+     *
+     * This call is synchronous by contract, so a host that defers its engine (see
+     * {@link load}) cannot answer it before that engine has arrived: such a host
+     * reports the reservation instead of inventing a collection.
+     */
+    define<D extends PodModelDescriptor>(descriptor: D, request: PodCollectionHostRequest<D>): PodCollection<RowOf<D>>;
+    /**
+     * How the collection is keeping up: `live` when its change feed is
+     * established, `unavailable` when it is read-once-plus-explicit-refresh,
+     * `degraded` after a failed read. This is the availability signal a page
+     * shows, in place of the transport's own state.
+     */
+    syncState<R extends {
+        id: string;
+    }>(collection: PodCollection<R>): PodSyncState;
+    /** Observe every collection's {@link PodCollectionsCapability.syncState}. */
+    subscribeSyncState(listener: () => void): () => void;
+    /** Releases every collection this capability created (session teardown). */
+    dispose(): void;
 }
 export interface AiClientCredentialSummary {
     /** CSS label, i.e. the `client_id` inside the `sk-` wrapper. */

package/node_modules/@undefineds.co/extension-sdk/package.json

@@ -35,7 +35,8 @@
     "test": "vitest run test --config ../../vitest.packages.config.mts"
   },
   "dependencies": {
-    "@inrupt/solid-client": "^3.0.0"
+    "@inrupt/solid-client": "^3.0.0",
+    "@undefineds.co/models": "0.2.59"
   },
   "peerDependencies": {
     "react": "^19.2.0"

package/node_modules/@undefineds.co/models/README.md

@@ -150,7 +150,7 @@ const selected = selectAIConfigCredential('openai', credentialRows, providerRows
 Embedding defaults:
 
 - `dashscope` is the canonical provider id for Qwen/DashScope embedding; `qwen`, `alibaba`, and `dashscope-cn` normalize to `dashscope`.
-- The catalog default embedding model is `text-embedding-v4` with `modelType = "embedding"`; callers can use it as a fallback when the user has a DashScope credential but no explicit `AIConfig.embeddingModel`.
+- The catalog default embedding model is `text-embedding-v4`, represented as an `EmbeddingModel`; callers can use it as a fallback when the user has a DashScope credential but no explicit `AIConfig.embeddingModel`. Legacy adapter DTOs may still expose `modelType: "embedding"`, but persisted RDF uses the subclass URI.
 - `paddleocr` has the official PaddleOCR AI Studio endpoint as provider `baseUrl`; users should only provide the TOKEN/API key credential.
 
 Selection semantics:

package/node_modules/@undefineds.co/models/dist/ai-config/index.d.ts

@@ -1,6 +1,6 @@
-import { type AIModelInsert, type AIModelRow } from '../ai-model.schema';
-import { type AIProviderInsert, type AIProviderRow } from '../ai-provider.schema';
-import type { CredentialInsert, CredentialRow } from '../credential.schema';
+import { type AIModelInsert, type AIModelRow } from '../ai-model.schema.js';
+import { type AIProviderInsert, type AIProviderRow } from '../ai-provider.schema.js';
+import type { CredentialInsert, CredentialRow } from '../credential.schema.js';
 export interface AIConfigProviderCatalogEntry {
     id: string;
     displayName: string;

package/node_modules/@undefineds.co/models/dist/ai-gateway.schema.d.ts

@@ -123,6 +123,11 @@ export declare const aiGatewayRepository: {
         id: string;
         revokedAt?: Date | string | number;
     }) => Promise<GatewayAccessKeyRow | null>;
+    readonly setAccessKeyEnabled: (db: AIGatewayRepositoryDb, input: {
+        id: string;
+        enabled: boolean;
+        disabledAt?: Date | string | number;
+    }) => Promise<GatewayAccessKeyRow | null>;
     readonly upsertQuotaSnapshot: (db: AIGatewayRepositoryDb, snapshot: QuotaSnapshotUpsert) => Promise<QuotaSnapshotRow | null>;
     readonly findFreshQuotaSnapshot: (db: AIGatewayRepositoryDb, input: FindFreshQuotaSnapshotInput) => Promise<QuotaSnapshotRow | null>;
     readonly findLatestQuotaSnapshot: (db: AIGatewayRepositoryDb, input: FindLatestQuotaSnapshotInput) => Promise<QuotaSnapshotRow | null>;

package/node_modules/@undefineds.co/models/dist/ai-gateway.schema.js

@@ -167,6 +167,15 @@ export const aiGatewayRepository = {
         }
         return db.updateById(gatewayAccessKeyResource, input.id, patch);
     },
+    setAccessKeyEnabled(db, input) {
+        const patch = {
+            disabledAt: input.enabled ? null : (asDate(input.disabledAt) ?? new Date()),
+        };
+        if (isAbsoluteIri(input.id)) {
+            return db.updateByIri(gatewayAccessKeyResource, input.id, patch);
+        }
+        return db.updateById(gatewayAccessKeyResource, input.id, patch);
+    },
     async upsertQuotaSnapshot(db, snapshot) {
         const validSnapshot = validateQuotaSnapshot(snapshot);
         const existing = isAbsoluteIri(validSnapshot.id)

package/node_modules/@undefineds.co/models/dist/ai-runtime.repository.d.ts

@@ -1,4 +1,4 @@
-import { credentialResource, type CredentialInsert, type CredentialRow, type CredentialUpdate } from './credential.schema';
+import { credentialResource, type CredentialInsert, type CredentialRow, type CredentialUpdate } from './credential.schema.js';
 export type AiRuntimeDeployment = 'local' | 'cloud' | string;
 export interface AiRuntimeCredentialTargetInput {
     deployment: AiRuntimeDeployment;

package/node_modules/@undefineds.co/models/dist/approval.repository.d.ts

@@ -1,5 +1,5 @@
-import { type ControlRequestClaimDatabase, type ControlRequestClaimStatus } from './control-request.repository';
-import { approvalResource, type ApprovalRow } from './approval.schema';
+import { type ControlRequestClaimDatabase, type ControlRequestClaimStatus } from './control-request.repository.js';
+import { approvalResource, type ApprovalRow } from './approval.schema.js';
 export type ApprovalClaimStatus = ControlRequestClaimStatus;
 export interface ApprovalClaimRequest {
     /** Full ApprovalRequest IRI. Subscribe/watch envelopes should pass as:object. */

package/node_modules/@undefineds.co/models/dist/audit.presentation.d.ts

@@ -1,5 +1,5 @@
-import type { ApprovalRow } from './approval.schema';
-import type { AuditRow } from './audit.schema';
+import type { ApprovalRow } from './approval.schema.js';
+import type { AuditRow } from './audit.schema.js';
 export interface AuditPresentation {
     title: string;
     description: string;

package/node_modules/@undefineds.co/models/dist/capture.repository.d.ts

@@ -1,4 +1,4 @@
-import { captureEventResource, type CaptureDecisionType, type CaptureEventRow } from './capture.schema';
+import { captureEventResource, type CaptureDecisionType, type CaptureEventRow } from './capture.schema.js';
 export interface CaptureCandidateListWhere extends Record<string, unknown> {
     source?: string | null;
     suggestedType?: string | null;

package/node_modules/@undefineds.co/models/dist/chat-project.repository.d.ts

@@ -1,4 +1,4 @@
-import { type SolidDatabase } from './repository';
+import { type SolidDatabase } from './repository.js';
 export interface ChatProjectMemoryEntry {
     id: string;
     text: string;

package/node_modules/@undefineds.co/models/dist/chat.repository.d.ts

@@ -1,5 +1,5 @@
-import { definePodRepository } from './repository';
-import { chatResource, type ChatRow, type ChatInsert, type ChatUpdate } from './chat.schema';
+import { definePodRepository } from './repository.js';
+import { chatResource, type ChatRow, type ChatInsert, type ChatUpdate } from './chat.schema.js';
 export declare function buildChatRepositoryTarget(chatIdOrRef: string): {
     id: string;
 };

package/node_modules/@undefineds.co/models/dist/control-request.repository.d.ts

@@ -1,5 +1,5 @@
-import type { approvalResource, ApprovalRow, ApprovalUpdate } from './approval.schema';
-import type { inputRequestResource, InputRequestRow, InputRequestUpdate } from './input-request.schema';
+import type { approvalResource, ApprovalRow, ApprovalUpdate } from './approval.schema.js';
+import type { inputRequestResource, InputRequestRow, InputRequestUpdate } from './input-request.schema.js';
 export type ControlRequestClaimStatus = 'claimed' | 'lost' | 'not_found' | 'not_actionable';
 export interface ClaimableControlRequestRow {
     status?: string | null;

package/node_modules/@undefineds.co/models/dist/conversation-share.repository.d.ts

@@ -1,4 +1,4 @@
-import { type SolidDatabase } from './repository';
+import { type SolidDatabase } from './repository.js';
 export interface ConversationShareWhere extends Record<string, unknown> {
     thread?: string;
 }

package/node_modules/@undefineds.co/models/dist/credential.schema.d.ts

@@ -18,6 +18,7 @@ export declare const credentialResource: import("@undefineds.co/drizzle-solid/di
     id: import("@undefineds.co/drizzle-solid/dist/core/schema").PodStringColumn<false, false>;
     provider: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
     authMode: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, true>;
+    offeringId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     service: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     status: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     apiKey: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
@@ -49,11 +50,13 @@ export declare const credentialResource: import("@undefineds.co/drizzle-solid/di
     oauthExpiresAt: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"datetime", null, false, false>;
     projectId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     organizationId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    metadata: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"json", null, false, false>;
 }>>;
 export declare const credentialTable: import("@undefineds.co/drizzle-solid/dist/core/schema").PodTableWithColumns<import("@undefineds.co/drizzle-solid/dist/core/schema").ResolvedColumns<{
     id: import("@undefineds.co/drizzle-solid/dist/core/schema").PodStringColumn<false, false>;
     provider: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
     authMode: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, true>;
+    offeringId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     service: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     status: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     apiKey: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
@@ -85,11 +88,13 @@ export declare const credentialTable: import("@undefineds.co/drizzle-solid/dist/
     oauthExpiresAt: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"datetime", null, false, false>;
     projectId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     organizationId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    metadata: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"json", null, false, false>;
 }>>;
 export declare const apiKeyCredentialResource: import("@undefineds.co/drizzle-solid/dist/core/schema").PodTableWithColumns<import("@undefineds.co/drizzle-solid/dist/core/schema").ResolvedColumns<{
     id: import("@undefineds.co/drizzle-solid/dist/core/schema").PodStringColumn<false, false>;
     provider: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
     authMode: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, true>;
+    offeringId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     service: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     status: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     apiKey: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
@@ -121,11 +126,13 @@ export declare const apiKeyCredentialResource: import("@undefineds.co/drizzle-so
     oauthExpiresAt: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"datetime", null, false, false>;
     projectId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     organizationId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    metadata: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"json", null, false, false>;
 }>>;
 export declare const apiKeyCredentialTable: import("@undefineds.co/drizzle-solid/dist/core/schema").PodTableWithColumns<import("@undefineds.co/drizzle-solid/dist/core/schema").ResolvedColumns<{
     id: import("@undefineds.co/drizzle-solid/dist/core/schema").PodStringColumn<false, false>;
     provider: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
     authMode: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, true>;
+    offeringId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     service: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     status: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     apiKey: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
@@ -157,11 +164,13 @@ export declare const apiKeyCredentialTable: import("@undefineds.co/drizzle-solid
     oauthExpiresAt: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"datetime", null, false, false>;
     projectId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     organizationId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    metadata: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"json", null, false, false>;
 }>>;
 export declare const oauthCredentialResource: import("@undefineds.co/drizzle-solid/dist/core/schema").PodTableWithColumns<import("@undefineds.co/drizzle-solid/dist/core/schema").ResolvedColumns<{
     id: import("@undefineds.co/drizzle-solid/dist/core/schema").PodStringColumn<false, false>;
     provider: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
     authMode: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, true>;
+    offeringId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     service: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     status: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     apiKey: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
@@ -193,11 +202,13 @@ export declare const oauthCredentialResource: import("@undefineds.co/drizzle-sol
     oauthExpiresAt: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"datetime", null, false, false>;
     projectId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     organizationId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    metadata: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"json", null, false, false>;
 }>>;
 export declare const oauthCredentialTable: import("@undefineds.co/drizzle-solid/dist/core/schema").PodTableWithColumns<import("@undefineds.co/drizzle-solid/dist/core/schema").ResolvedColumns<{
     id: import("@undefineds.co/drizzle-solid/dist/core/schema").PodStringColumn<false, false>;
     provider: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"uri", null, false, false>;
     authMode: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, true>;
+    offeringId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     service: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     status: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, true, true>;
     apiKey: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
@@ -229,6 +240,7 @@ export declare const oauthCredentialTable: import("@undefineds.co/drizzle-solid/
     oauthExpiresAt: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"datetime", null, false, false>;
     projectId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
     organizationId: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"string", null, false, false>;
+    metadata: import("@undefineds.co/drizzle-solid/dist/core/schema").ColumnBuilder<"json", null, false, false>;
 }>>;
 export type CredentialRow = typeof credentialResource.$inferSelect;
 export type CredentialInsert = typeof credentialResource.$inferInsert;

package/node_modules/@undefineds.co/models/dist/credential.schema.js

@@ -1,4 +1,4 @@
-import { boolean, id, integer, podTable, string, text, timestamp, uri } from "@undefineds.co/drizzle-solid";
+import { boolean, id, integer, json, podTable, string, text, timestamp, uri } from "@undefineds.co/drizzle-solid";
 import { DCTerms, UDFS } from "./namespaces.js";
 export const ProviderAuthMode = {
     oauth: "oauth",
@@ -19,6 +19,14 @@ export const credentialResource = podTable("credential", {
     // Keep the write default while allowing credentials created before authMode
     // was introduced to remain queryable and migratable.
     authMode: string("authMode").predicate(UDFS.authMode).default(ProviderAuthMode.apiKey),
+    // Which offering of the provider this credential connects through, by the
+    // offering id the provider catalog publishes (`api-platform`,
+    // `official-subscription`, `subscription-key`, `token-plan`,
+    // `pay-as-you-go`, `local`, …). A plain attribute rather than a relation:
+    // offerings are catalog content, not Pod resources, and the set grows with
+    // the catalog, so the schema does not enumerate it. Never encode it in the
+    // provider resource id - `provider` says which provider, this says how.
+    offeringId: string("offeringId").predicate(UDFS.offeringId),
     service: string("service").predicate(UDFS.service).notNull().default("ai"),
     status: string("status").predicate(UDFS.status).notNull().default("active"),
     apiKey: string("apiKey").predicate(UDFS.apiKey),
@@ -37,6 +45,7 @@ export const credentialResource = podTable("credential", {
     proxyUrl: string("proxyUrl").predicate(UDFS.proxyUrl),
     label: string("label").predicate(UDFS.label),
     isDefault: boolean("isDefault").predicate(UDFS.isDefault).default(false),
+    // Older credentials predate this field; keep reads optional and default new writes.
     createdAt: timestamp("createdAt").predicate(DCTerms.created).defaultNow(),
     lastUsedAt: timestamp("lastUsedAt").predicate(UDFS.lastUsedAt),
     // A credential Xpod itself issued to a client (the gateway `sk-` key) names the
@@ -56,6 +65,11 @@ export const credentialResource = podTable("credential", {
     oauthExpiresAt: timestamp("oauthExpiresAt").predicate(UDFS.oauthExpiresAt),
     projectId: string("projectId").predicate(UDFS.projectId),
     organizationId: string("organizationId").predicate(UDFS.organizationId),
+    // Opaque adapter-local metadata only (account identity, compat switches, UI
+    // health/priority …). Shared relations must be explicit typed columns: a write
+    // to an undeclared column is dropped silently, so this declaration is what
+    // keeps existing callers' `metadata.*` reads and writes working.
+    metadata: json("metadata").predicate(UDFS.metadata),
 }, {
     base: "/settings/",
     sparqlEndpoint: "/settings/-/sparql",

package/node_modules/@undefineds.co/models/dist/discovery/index.d.ts

@@ -4,8 +4,8 @@
  * 提供 AI 供应商、模型等元数据的发现服务
  * 支持内置数据 + 远程 API 获取（有 Key 时）
  */
-export * from './types';
-import type { ProviderMetadata, ModelMetadata, DiscoveryService } from './types';
+export * from './types.js';
+import type { ProviderMetadata, ModelMetadata, DiscoveryService } from './types.js';
 declare class BuiltinDiscoveryService implements DiscoveryService {
     getProviders(): Promise<ProviderMetadata[]>;
     getProvider(slug: string): Promise<ProviderMetadata | undefined>;