@undefineds.co/xpod 0.4.11 → 0.4.13

package/node_modules/@undefineds.co/ai-connections/dist/error-wording.d.ts

@@ -0,0 +1,24 @@
+import type { AiConnectionsClient, AiConnectionsProvider } from '@undefineds.co/ai-connections-core/client';
+/**
+ * The sentence to show for anything a request threw.
+ *
+ * A failed request carries the facts - the wire code, the upstream status, the
+ * request's provider and auth mode - so the sentence is chosen from those rather
+ * than parsed back out of a message. Anything that is not a request failure (a
+ * thrown string, an unexpected `Error`) still goes through the sanitiser, which
+ * is what keeps internals off the screen.
+ */
+export declare function aiConnectionsErrorMessage(error: unknown): string;
+export declare function aiConnectionsErrorMessageForPayload(payload: unknown, status: number, context?: {
+    provider?: AiConnectionsProvider;
+    authMode?: 'apiKey' | 'deviceCodeOAuth' | 'local';
+}): string;
+/**
+ * The shared client reports a failure by naming its code; the sentence a user
+ * reads is the applet's (`error-wording`). This app renders messages straight
+ * from the thrown error, so it relabels them once, at its own boundary, instead
+ * of letting a code reach the screen or teaching every call site to translate.
+ * The error object itself is rethrown unchanged, so callers that inspect it -
+ * `instanceof`, `code`, `providerStatus` - keep working.
+ */
+export declare function withDisplayableErrors(client: AiConnectionsClient): AiConnectionsClient;

package/node_modules/@undefineds.co/ai-connections/dist/error-wording.js

@@ -0,0 +1,253 @@
+import { AiConnectionsRequestError, aiConnectionsErrorCode } from '@undefineds.co/ai-connections-core/client';
+/**
+ * The wording a failed AI Connection request is shown under.
+ *
+ * This used to live in the shared core, which meant the published contract
+ * carried sentences: nine Chinese messages plus the English fallbacks, and every
+ * consumer of the client - the applet and the web app - displayed wording chosen
+ * by a package that has no idea who is rendering it. The core now classifies a
+ * failure and hands over its code; the sentence is chosen here, where it is read.
+ *
+ * The rules below are a move, not a rewrite: the same codes map to the same
+ * sentences as before, so nothing a user reads changes.
+ */
+const AI_CONNECTIONS_GENERIC_ERROR_MESSAGE = 'AI Connection request failed. Please try again.';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+const LOCAL_SESSION_REFRESH_FAILED_MESSAGE = '订阅登录态自动刷新失败，请稍后重试。';
+const LOCAL_SESSION_REAUTH_REQUIRED_MESSAGE = '订阅登录态已失效，请在原客户端重新登录后重读，或使用设备码登录。';
+const OAUTH_MODEL_AUTH_FAILED_MESSAGE = '订阅登录态不可用，请重读登录态或重新登录后再同步模型。';
+const MODEL_DISCOVERY_SAFE_MESSAGES = new Set([
+    OAUTH_MODEL_AUTH_FAILED_MESSAGE,
+    LOCAL_SESSION_REFRESH_FAILED_MESSAGE,
+    LOCAL_SESSION_REAUTH_REQUIRED_MESSAGE,
+    '密钥不可用。请检查密钥是否填写正确，或换一个密钥后重试。',
+    '模型服务地址不正确。请检查服务地址后重试。',
+    '请求太频繁。请稍等一会儿再试。',
+    '模型服务暂时没有响应。请稍后重试。',
+    '模型列表获取失败。请检查密钥、服务地址或网络后重试。',
+]);
+function normalizeAiConnectionsErrorText(message) {
+    if (message.startsWith('provider_models_response_error:')) {
+        return sanitizeProviderResponseMessage(message.slice('provider_models_response_error:'.length))
+            ?? '模型列表获取失败。请检查密钥、服务地址或网络后重试。';
+    }
+    const exact = messageForSafeErrorCode(message);
+    if (exact)
+        return exact;
+    const prefix = message.split(':', 1)[0]?.trim();
+    const prefixed = prefix ? messageForSafeErrorCode(prefix) : undefined;
+    if (prefixed)
+        return prefixed;
+    if (message === 'AI Connection service identity is unavailable')
+        return message;
+    if (MODEL_DISCOVERY_SAFE_MESSAGES.has(message))
+        return message;
+    if (isModelDiscoveryMessageWithProviderDetail(message))
+        return message;
+    if (message.startsWith('invalid_'))
+        return 'AI Connection returned an invalid response.';
+    return AI_CONNECTIONS_GENERIC_ERROR_MESSAGE;
+}
+/**
+ * The sentence to show for anything a request threw.
+ *
+ * A failed request carries the facts - the wire code, the upstream status, the
+ * request's provider and auth mode - so the sentence is chosen from those rather
+ * than parsed back out of a message. Anything that is not a request failure (a
+ * thrown string, an unexpected `Error`) still goes through the sanitiser, which
+ * is what keeps internals off the screen.
+ */
+export function aiConnectionsErrorMessage(error) {
+    if (error instanceof AiConnectionsRequestError) {
+        return aiConnectionsErrorMessageForPayload(error.payload, error.status, {
+            provider: error.provider,
+            authMode: error.authMode,
+        });
+    }
+    if (error instanceof Error) {
+        return normalizeAiConnectionsErrorText(error.message);
+    }
+    return normalizeAiConnectionsErrorText(String(error));
+}
+export function aiConnectionsErrorMessageForPayload(payload, status, context = {}) {
+    const code = aiConnectionsErrorCode(payload);
+    if (code === 'provider_models_response_error') {
+        const message = isRecord(payload) && typeof payload.message === 'string'
+            ? sanitizeProviderResponseMessage(payload.message)
+            : undefined;
+        if (message)
+            return message;
+        return '模型列表获取失败。请检查密钥、服务地址或网络后重试。';
+    }
+    if (code === 'provider_models_fetch_failed') {
+        const providerStatus = isRecord(payload) && typeof payload.providerStatus === 'number'
+            ? payload.providerStatus
+            : undefined;
+        const providerMessage = isRecord(payload) && typeof payload.providerMessage === 'string'
+            ? payload.providerMessage.trim()
+            : undefined;
+        return withProviderMessage(modelDiscoveryErrorMessage(providerStatus, context.authMode), providerMessage);
+    }
+    const coded = code ? messageForSafeErrorCode(code, context.provider) : undefined;
+    if (coded)
+        return coded;
+    const text = isRecord(payload) && typeof payload.error === 'string'
+        ? payload.error
+        : undefined;
+    if (text) {
+        const exact = messageForSafeErrorCode(text, context.provider);
+        if (exact)
+            return exact;
+        if (text === 'AI Connection service identity is unavailable') {
+            return text;
+        }
+        if (text === 'Provider credential not found for current identity') {
+            return '当前身份没有可用的额度凭证。';
+        }
+        if (text === 'Provider quota adapter not found' || text === 'Provider quota lookup failed') {
+            return '该接入方式不支持查询官方额度。';
+        }
+    }
+    if (status === 401)
+        return 'Please sign in again to continue.';
+    if (status === 403)
+        return 'AI Connection permission was denied.';
+    if (status === 404 && context.provider) {
+        return `${providerLabel(context.provider)} connection is not configured.`;
+    }
+    if (status === 429)
+        return 'AI Connection is rate limited. Please try again later.';
+    if (status === 503)
+        return 'AI Connection service is unavailable.';
+    return AI_CONNECTIONS_GENERIC_ERROR_MESSAGE;
+}
+function messageForSafeErrorCode(code, provider) {
+    switch (code.trim().toLowerCase().replace(/-/g, '_')) {
+        case 'not_configured':
+        case 'notconfigured':
+            return provider
+                ? `${providerLabel(provider)} connection is not configured.`
+                : 'AI provider connection is not configured.';
+        case 'unsupported':
+            return provider
+                ? `${providerLabel(provider)} does not support this operation.`
+                : 'This AI Connection operation is not supported.';
+        case 'service_identity_unavailable':
+            return 'AI Connection service identity is unavailable';
+        case 'unauthorized':
+            return 'Please sign in again to continue.';
+        case 'forbidden':
+        case 'permission_denied':
+            return 'AI Connection permission was denied.';
+        case 'rate_limited':
+            return 'AI Connection is rate limited. Please try again later.';
+        case 'service_unavailable':
+            return 'AI Connection service is unavailable.';
+        case 'unsafe_provider_base_url':
+            return '该服务地址指向 Xpod 不允许访问的网络，请改用公网 HTTPS 地址。';
+        case 'invalid_proxy_url':
+            return '代理地址必须是无账号密码的 HTTP 或 HTTPS 地址。';
+        case 'oauth_refresh_failed':
+        case 'oauth_refresh_unavailable':
+        case 'local_session_refresh_failed':
+            return LOCAL_SESSION_REFRESH_FAILED_MESSAGE;
+        case 'oauth_session_reauth_required':
+        case 'oauth_refresh_token_required':
+        case 'local_session_reauth_required':
+        case 'local_session_missing_refresh_token':
+            return LOCAL_SESSION_REAUTH_REQUIRED_MESSAGE;
+        case 'models_persistence_failed':
+            return '模型已获取，但保存到 Pod 失败。请重试同步模型。';
+        case 'quota_credential_not_found':
+            return '当前身份没有可用的额度凭证。';
+        case 'credential_secret_unavailable':
+            return '当前凭证密钥不可用，请重新保存后再查询额度。';
+        case 'gateway_api_key_plaintext_unavailable':
+            return 'Pod 中未找到此 API Key 的原文，无法复制配置。请创建新的 Key，更新客户端后再删除旧 Key。';
+        case 'quota_adapter_not_found':
+            return '该接入方式不支持查询官方额度。';
+        default:
+            return undefined;
+    }
+}
+function modelDiscoveryErrorMessage(providerStatus, authMode) {
+    if (providerStatus === 401 || providerStatus === 403) {
+        if (authMode === 'deviceCodeOAuth')
+            return OAUTH_MODEL_AUTH_FAILED_MESSAGE;
+        return '密钥不可用。请检查密钥是否填写正确，或换一个密钥后重试。';
+    }
+    if (providerStatus === 404) {
+        return '模型服务地址不正确。请检查服务地址后重试。';
+    }
+    if (providerStatus === 429) {
+        return '请求太频繁。请稍等一会儿再试。';
+    }
+    if (providerStatus !== undefined && providerStatus >= 500) {
+        return '模型服务暂时没有响应。请稍后重试。';
+    }
+    return '模型列表获取失败。请检查密钥、服务地址或网络后重试。';
+}
+function withProviderMessage(message, providerMessage) {
+    const sanitized = providerMessage ? sanitizeProviderResponseMessage(providerMessage) : undefined;
+    if (!sanitized)
+        return message;
+    return `${message} 上游返回：${sanitized}`;
+}
+function isModelDiscoveryMessageWithProviderDetail(message) {
+    const marker = ' 上游返回：';
+    const index = message.indexOf(marker);
+    if (index <= 0)
+        return false;
+    return MODEL_DISCOVERY_SAFE_MESSAGES.has(message.slice(0, index));
+}
+function sanitizeProviderResponseMessage(value) {
+    const sanitized = value
+        .replace(/[\u0000-\u001f\u007f]/gu, ' ')
+        .replace(/\bBearer\s+[^\s,;]+/giu, 'Bearer [REDACTED]')
+        .replace(/(?:sk|id)[._-][A-Za-z0-9._-]{8,}/gu, '[REDACTED]')
+        .replace(/https?:\/\/[^\s]+/giu, '[URL]')
+        .trim()
+        .slice(0, 240);
+    return sanitized || undefined;
+}
+function providerLabel(provider) {
+    switch (provider) {
+        case 'openai': return 'OpenAI';
+        case 'anthropic': return 'Anthropic';
+        case 'kimi': return 'Kimi';
+        case 'bailian': return 'Bailian';
+        case 'deepseek': return 'DeepSeek';
+        case 'zhipu': return 'Zhipu';
+        case 'ollama': return 'Ollama';
+        case 'custom': return 'Custom';
+    }
+}
+/**
+ * The shared client reports a failure by naming its code; the sentence a user
+ * reads is the applet's (`error-wording`). This app renders messages straight
+ * from the thrown error, so it relabels them once, at its own boundary, instead
+ * of letting a code reach the screen or teaching every call site to translate.
+ * The error object itself is rethrown unchanged, so callers that inspect it -
+ * `instanceof`, `code`, `providerStatus` - keep working.
+ */
+export function withDisplayableErrors(client) {
+    const wrapped = { ...client };
+    for (const [key, value] of Object.entries(client)) {
+        if (typeof value !== 'function')
+            continue;
+        wrapped[key] = async (...args) => {
+            try {
+                return await value.apply(client, args);
+            }
+            catch (error) {
+                if (error instanceof AiConnectionsRequestError) {
+                    error.message = aiConnectionsErrorMessage(error);
+                }
+                throw error;
+            }
+        };
+    }
+    return wrapped;
+}

package/node_modules/@undefineds.co/ai-connections/dist/gateway-endpoints.d.ts

@@ -0,0 +1,14 @@
+import type { AiEndpointEntry } from './offering-endpoints';
+/**
+ * The protocols the Xpod gateway serves, as registered by
+ * `src/api/handlers/AiGatewayHandler.ts`:
+ *
+ * - `POST /v1/chat/completions` (OpenAI Chat Completions)
+ * - `POST /v1/responses`        (OpenAI Responses)
+ * - `POST /v1/messages`         (Anthropic Messages)
+ *
+ * Each base URL comes from the same rule the coding-client adapters use, so what
+ * this page advertises is exactly what `AiClientConfigurationService` writes into
+ * a client.
+ */
+export declare function xpodProtocolEndpoints(apiBase: string): AiEndpointEntry[];

package/node_modules/@undefineds.co/ai-connections/dist/gateway-endpoints.js

@@ -0,0 +1,20 @@
+import { normalizeMessagesEndpoint, normalizeV1Endpoint } from '@undefineds.co/ai-connections-core/endpoint-urls';
+/**
+ * The protocols the Xpod gateway serves, as registered by
+ * `src/api/handlers/AiGatewayHandler.ts`:
+ *
+ * - `POST /v1/chat/completions` (OpenAI Chat Completions)
+ * - `POST /v1/responses`        (OpenAI Responses)
+ * - `POST /v1/messages`         (Anthropic Messages)
+ *
+ * Each base URL comes from the same rule the coding-client adapters use, so what
+ * this page advertises is exactly what `AiClientConfigurationService` writes into
+ * a client.
+ */
+export function xpodProtocolEndpoints(apiBase) {
+    return [
+        { protocol: 'chatCompletions', baseUrl: normalizeV1Endpoint(apiBase) },
+        { protocol: 'responses', baseUrl: normalizeV1Endpoint(apiBase) },
+        { protocol: 'anthropic', baseUrl: normalizeMessagesEndpoint(apiBase) },
+    ];
+}

package/node_modules/@undefineds.co/ai-connections/dist/index.d.ts

@@ -1,9 +1,12 @@
 import type { WebExtensionModule } from '@undefineds.co/extension-sdk/web';
 import { type AiConnectionsController } from './controller';
-export * from './ai-connections-client';
 export * from './AiClientConfigurationSection';
 export * from './AiConnectionsPanel';
+export * from './AiCopyButton';
+export * from './AiEndpointList';
 export * from './AiGatewayKeysSection';
+export * from './AiInfoTooltip';
+export * from './AiProviderHeader';
 export * from './AiConnectionsList';
 export * from './AiConnectionsMain';
 export * from './AiConnectionsHeader';
@@ -11,6 +14,10 @@ export * from './AiConnectionsMainHeader';
 export * from './AiCustomProviderDialog';
 export * from './AiModelEditorDialog';
 export * from './controller';
+export * from './collections';
+export * from './display-wording';
+export * from './error-wording';
+export * from './gateway-endpoints';
 export * from './AiProviderCard';
 export * from './AiCredentialPoolSection';
 export * from './offering-label';

package/node_modules/@undefineds.co/ai-connections/dist/index.js

@@ -6,10 +6,13 @@ import { AiConnectionsMainHeader } from './AiConnectionsMainHeader.js';
 import { createAiConnectionsController, } from './controller.js';
 import { aiConnectionManifest } from './manifest.js';
 import { createElement } from 'react';
-export * from './ai-connections-client.js';
 export * from './AiClientConfigurationSection.js';
 export * from './AiConnectionsPanel.js';
+export * from './AiCopyButton.js';
+export * from './AiEndpointList.js';
 export * from './AiGatewayKeysSection.js';
+export * from './AiInfoTooltip.js';
+export * from './AiProviderHeader.js';
 export * from './AiConnectionsList.js';
 export * from './AiConnectionsMain.js';
 export * from './AiConnectionsHeader.js';
@@ -17,6 +20,10 @@ export * from './AiConnectionsMainHeader.js';
 export * from './AiCustomProviderDialog.js';
 export * from './AiModelEditorDialog.js';
 export * from './controller.js';
+export * from './collections.js';
+export * from './display-wording.js';
+export * from './error-wording.js';
+export * from './gateway-endpoints.js';
 export * from './AiProviderCard.js';
 export * from './AiCredentialPoolSection.js';
 export * from './offering-label.js';

package/node_modules/@undefineds.co/ai-connections/dist/manifest.js

@@ -14,5 +14,5 @@ export const aiConnectionManifest = validateExtensionManifest({
             }],
     },
     dataModels: [],
-    hostCapabilities: ['navigation.openExternal', 'aiClientConfiguration'],
+    hostCapabilities: ['navigation.openExternal', 'aiClientConfiguration', 'solidNotifications', 'podCollections'],
 });

package/node_modules/@undefineds.co/ai-connections/dist/offering-endpoints.d.ts

@@ -1,5 +1,19 @@
-import type { AiProviderOffering } from './ai-connections-client';
+import type { AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
+/** One protocol the user can point a client at: the `protocol → base URL` pair the UI lists. */
+export interface AiEndpointEntry {
+    protocol: string;
+    baseUrl: string;
+}
 /** Endpoint the offering actually talks to: the discovery protocol wins, first endpoint is the fallback. */
 export declare function offeringEndpoint(offering: AiProviderOffering): string | undefined;
 export declare function endpointDisplayValue(value: string): string;
+/**
+ * How a provider's own endpoint is described: by the API it serves.
+ *
+ * Used where the reader is inspecting what an upstream offering speaks. Xpod's
+ * own endpoints are named by {@link compatibleProtocolLabel} instead, because a
+ * client arrives already speaking a protocol rather than asking what Xpod uses.
+ */
 export declare function endpointProtocolLabel(protocol: string): string;
+/** The client protocols Xpod accepts, named the way the client's own docs name them. */
+export declare function compatibleProtocolLabel(protocol: string): string;

package/node_modules/@undefineds.co/ai-connections/dist/offering-endpoints.js

@@ -13,6 +13,13 @@ export function endpointDisplayValue(value) {
         return value;
     }
 }
+/**
+ * How a provider's own endpoint is described: by the API it serves.
+ *
+ * Used where the reader is inspecting what an upstream offering speaks. Xpod's
+ * own endpoints are named by {@link compatibleProtocolLabel} instead, because a
+ * client arrives already speaking a protocol rather than asking what Xpod uses.
+ */
 export function endpointProtocolLabel(protocol) {
     if (protocol === 'responses')
         return 'Responses API';
@@ -22,3 +29,13 @@ export function endpointProtocolLabel(protocol) {
         return 'Anthropic API';
     return protocol;
 }
+/** The client protocols Xpod accepts, named the way the client's own docs name them. */
+export function compatibleProtocolLabel(protocol) {
+    if (protocol === 'responses')
+        return 'OpenAI Responses 兼容';
+    if (protocol === 'chatCompletions')
+        return 'OpenAI Chat 兼容';
+    if (protocol === 'anthropic')
+        return 'Anthropic Messages 兼容';
+    return `${protocol} 兼容`;
+}

package/node_modules/@undefineds.co/ai-connections/dist/offering-label.d.ts

@@ -1,4 +1,4 @@
-import type { AiProviderAuthorizationMethod, AiProviderOffering } from './ai-connections-client';
+import type { AiProviderAuthorizationMethod, AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
 export declare function offeringTitle(offering: AiProviderOffering): string;
 /** Name of the offering kind. Same taxonomy as the title fallback, so it reuses the one map. */
 export declare function offeringKindLabel(kind: string): string;

package/node_modules/@undefineds.co/ai-connections/dist/provider-visuals.d.ts

@@ -1,3 +1,8 @@
-import type { AiConnectionsProvider } from './ai-connections-client';
+import type { AiConnectionsProvider } from '@undefineds.co/ai-connections-core/client';
+/**
+ * The Xpod shield (`ui/src/assets/xpod-shield.svg`), inlined like the provider
+ * marks: from a coding client's point of view Xpod is just another provider.
+ */
+export declare const XPOD_AVATAR = "data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA2NCA2NCIgZmlsbD0ibm9uZSI+CiAgPHBhdGgKICAgIGQ9Ik0zMiA3IDUxIDE2LjV2MTMuOGMwIDEyLjQtNy40IDIxLjItMTkgMjcuNy0xMS42LTYuNS0xOS0xNS4zLTE5LTI3LjdWMTYuNUwzMiA3WiIKICAgIHN0cm9rZT0iIzhBNzJCRSIKICAgIHN0cm9rZS13aWR0aD0iNSIKICAgIHN0cm9rZS1saW5lY2FwPSJyb3VuZCIKICAgIHN0cm9rZS1saW5lam9pbj0icm91bmQiCiAgLz4KPC9zdmc+Cg==";
 export declare function getProviderAvatar(provider: AiConnectionsProvider | string): string | undefined;
 export declare function getProviderAvatarBackground(provider: AiConnectionsProvider | string): string | undefined;

package/node_modules/@undefineds.co/ai-connections/dist/provider-visuals.js

@@ -7,6 +7,11 @@ const bailianAvatar = 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAY
 const zhipuAvatar = 'data:image/png;base64,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';
 'data:image/svg+xml;utf8,%3Csvg%20xmlns%3D%27http%3A//www.w3.org/2000/svg%27%20viewBox%3D%270%200%20200%20200%27%3E%3Cdefs%3E%3ClinearGradient%20id%3D%27g%27%20x1%3D%270%27%20y1%3D%270%27%20x2%3D%271%27%20y2%3D%271%27%3E%3Cstop%20offset%3D%270%27%20stop-color%3D%27%237A5CFF%27/%3E%3Cstop%20offset%3D%271%27%20stop-color%3D%27%234A6CF7%27/%3E%3C/linearGradient%3E%3C/defs%3E%3Crect%20width%3D%27200%27%20height%3D%27200%27%20fill%3D%27url%28%23g%29%27/%3E%3Cpath%20fill%3D%27%23FFFFFF%27%20fill-rule%3D%27evenodd%27%20d%3D%27M100%2036%20L156%2068%20L156%20132%20L100%20164%20L44%20132%20L44%2068%20Z%20M100%2064%20C102.5%2086%20114%2097.5%20136%20100%20C114%20102.5%20102.5%20114%20100%20136%20C97.5%20114%2086%20102.5%2064%20100%20C86%2097.5%2097.5%2086%20100%2064%20Z%27/%3E%3C/svg%3E';
 const ollamaAvatar = 'data:image/svg+xml;utf8,%3Csvg%20viewBox%3D%220%200%2024%2024%22%20xmlns%3D%22http%3A//www.w3.org/2000/svg%22%3E%3Cpath%20d%3D%22M16.361%2010.26a.894.894%200%200%200-.558.47l-.072.148.001.207c0%20.193.004.217.059.353.076.193.152.312.291.448.24.238.51.3.872.205a.86.86%200%200%200%20.517-.436.752.752%200%200%200%20.08-.498c-.064-.453-.33-.782-.724-.897a1.06%201.06%200%200%200-.466%200zm-9.203.005c-.305.096-.533.32-.65.639a1.187%201.187%200%200%200-.06.52c.057.309.31.59.598.667.362.095.632.033.872-.205.14-.136.215-.255.291-.448.055-.136.059-.16.059-.353l.001-.207-.072-.148a.894.894%200%200%200-.565-.472%201.02%201.02%200%200%200-.474.007Zm4.184%202c-.131.071-.223.25-.195.383.031.143.157.288.353.407.105.063.112.072.117.136.004.038-.01.146-.029.243-.02.094-.036.194-.036.222.002.074.07.195.143.253.064.052.076.054.255.059.164.005.198.001.264-.03.169-.082.212-.234.15-.525-.052-.243-.042-.28.087-.355.137-.08.281-.219.324-.314a.365.365%200%200%200-.175-.48.394.394%200%200%200-.181-.033c-.126%200-.207.03-.355.124l-.085.053-.053-.032c-.219-.13-.259-.145-.391-.143a.396.396%200%200%200-.193.032zm.39-2.195c-.373.036-.475.05-.654.086-.291.06-.68.195-.951.328-.94.46-1.589%201.226-1.787%202.114-.04.176-.045.234-.045.53%200%20.294.005.357.043.524.264%201.16%201.332%202.017%202.714%202.173.3.033%201.596.033%201.896%200%201.11-.125%202.064-.727%202.493-1.571.114-.226.169-.372.22-.602.039-.167.044-.23.044-.523%200-.297-.005-.355-.045-.531-.288-1.29-1.539-2.304-3.072-2.497a6.873%206.873%200%200%200-.855-.031zm.645.937a3.283%203.283%200%200%201%201.44.514c.223.148.537.458.671.662.166.251.26.508.303.82.02.143.01.251-.043.482-.08.345-.332.705-.672.957a3.115%203.115%200%200%201-.689.348c-.382.122-.632.144-1.525.138-.582-.006-.686-.01-.853-.042-.57-.107-1.022-.334-1.35-.68-.264-.28-.385-.535-.45-.946-.03-.192.025-.509.137-.776.136-.326.488-.73.836-.963.403-.269.934-.46%201.422-.512.187-.02.586-.02.773-.002zm-5.503-11a1.653%201.653%200%200%200-.683.298C5.617.74%205.173%201.666%204.985%202.819c-.07.436-.119%201.04-.119%201.503%200%20.544.064%201.24.155%201.721.02.107.031.202.023.208a8.12%208.12%200%200%201-.187.152%205.324%205.324%200%200%200-.949%201.02%205.49%205.49%200%200%200-.94%202.339%206.625%206.625%200%200%200-.023%201.357c.091.78.325%201.438.727%202.04l.13.195-.037.064c-.269.452-.498%201.105-.605%201.732-.084.496-.095.629-.095%201.294%200%20.67.009.803.088%201.266.095.555.288%201.143.503%201.534.071.128.243.393.264.407.007.003-.014.067-.046.141a7.405%207.405%200%200%200-.548%201.873c-.062.417-.071.552-.071.991%200%20.56.031.832.148%201.279L3.42%2024h1.478l-.05-.091c-.297-.552-.325-1.575-.068-2.597.117-.472.25-.819.498-1.296l.148-.29v-.177c0-.165-.003-.184-.057-.293a.915.915%200%200%200-.194-.25%201.74%201.74%200%200%201-.385-.543c-.424-.92-.506-2.286-.208-3.451.124-.486.329-.918.544-1.154a.787.787%200%200%200%20.223-.531c0-.195-.07-.355-.224-.522a3.136%203.136%200%200%201-.817-1.729c-.14-.96.114-2.005.69-2.834.563-.814%201.353-1.336%202.237-1.475.199-.033.57-.028.776.01.226.04.367.028.512-.041.179-.085.268-.19.374-.431.093-.215.165-.333.36-.576.234-.29.46-.489.822-.729.413-.27.884-.467%201.352-.561.17-.035.25-.04.569-.04.319%200%20.398.005.569.04a4.07%204.07%200%200%201%201.914.997c.117.109.398.457.488.602.034.057.095.177.132.267.105.241.195.346.374.43.14.068.286.082.503.045.343-.058.607-.053.943.016%201.144.23%202.14%201.173%202.581%202.437.385%201.108.276%202.267-.296%203.153-.097.15-.193.27-.333.419-.301.322-.301.722-.001%201.053.493.539.801%201.866.708%203.036-.062.772-.26%201.463-.533%201.854a2.096%202.096%200%200%201-.224.258.916.916%200%200%200-.194.25c-.054.109-.057.128-.057.293v.178l.148.29c.248.476.38.823.498%201.295.253%201.008.231%202.01-.059%202.581a.845.845%200%200%200-.044.098c0%20.006.329.009.732.009h.73l.02-.074.036-.134c.019-.076.057-.3.088-.516.029-.217.029-1.016%200-1.258-.11-.875-.295-1.57-.597-2.226-.032-.074-.053-.138-.046-.141.008-.005.057-.074.108-.152.376-.569.607-1.284.724-2.228.031-.26.031-1.378%200-1.628-.083-.645-.182-1.082-.348-1.525a6.083%206.083%200%200%200-.329-.7l-.038-.064.131-.194c.402-.604.636-1.262.727-2.04a6.625%206.625%200%200%200-.024-1.358%205.512%205.512%200%200%200-.939-2.339%205.325%205.325%200%200%200-.95-1.02%208.097%208.097%200%200%201-.186-.152.692.692%200%200%201%20.023-.208c.208-1.087.201-2.443-.017-3.503-.19-.924-.535-1.658-.98-2.082-.354-.338-.716-.482-1.15-.455-.996.059-1.8%201.205-2.116%203.01a6.805%206.805%200%200%200-.097.726c0%20.036-.007.066-.015.066a.96.96%200%200%201-.149-.078A4.857%204.857%200%200%200%2012%203.03c-.832%200-1.687.243-2.456.698a.958.958%200%200%201-.148.078c-.008%200-.015-.03-.015-.066a6.71%206.71%200%200%200-.097-.725C8.997%201.392%208.337.319%207.46.048a2.096%202.096%200%200%200-.585-.041Zm.293%201.402c.248.197.523.759.682%201.388.03.113.06.244.069.292.007.047.026.152.041.233.067.365.098.76.102%201.24l.002.475-.12.175-.118.178h-.278c-.324%200-.646.041-.954.124l-.238.06c-.033.007-.038-.003-.057-.144a8.438%208.438%200%200%201%20.016-2.323c.124-.788.413-1.501.696-1.711.067-.05.079-.049.157.013zm9.825-.012c.17.126.358.46.498.888.28.854.36%202.028.212%203.145-.019.14-.024.151-.057.144l-.238-.06a3.693%203.693%200%200%200-.954-.124h-.278l-.119-.178-.119-.175.002-.474c.004-.669.066-1.19.214-1.772.157-.623.434-1.185.68-1.382.078-.062.09-.063.159-.012z%22/%3E%3C/svg%3E';
+/**
+ * The Xpod shield (`ui/src/assets/xpod-shield.svg`), inlined like the provider
+ * marks: from a coding client's point of view Xpod is just another provider.
+ */
+export const XPOD_AVATAR = 'data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA2NCA2NCIgZmlsbD0ibm9uZSI+CiAgPHBhdGgKICAgIGQ9Ik0zMiA3IDUxIDE2LjV2MTMuOGMwIDEyLjQtNy40IDIxLjItMTkgMjcuNy0xMS42LTYuNS0xOS0xNS4zLTE5LTI3LjdWMTYuNUwzMiA3WiIKICAgIHN0cm9rZT0iIzhBNzJCRSIKICAgIHN0cm9rZS13aWR0aD0iNSIKICAgIHN0cm9rZS1saW5lY2FwPSJyb3VuZCIKICAgIHN0cm9rZS1saW5lam9pbj0icm91bmQiCiAgLz4KPC9zdmc+Cg==';
 const providerAvatars = {
     openai: openaiAvatar,
     anthropic: anthropicAvatar,

package/node_modules/@undefineds.co/ai-connections/dist/service-access.js

@@ -1,3 +1,4 @@
+import { AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS } from '@undefineds.co/ai-connections-core/provider-catalog';
 export const AI_CONNECTIONS_APPLET_ID = 'co.undefineds.ai-connections';
 const KNOWN_RESOURCE_PATHS = {
     providerCredentials: 'settings/credentials.ttl',
@@ -5,33 +6,7 @@ const KNOWN_RESOURCE_PATHS = {
     gatewayAccessKeys: '.data/ai/gateway/access-keys.ttl',
     quotaSnapshots: '.data/ai/gateway/quota.ttl',
 };
-const PROVIDER_DOCUMENT_IDS = [
-    'openai',
-    'openai-official-subscription',
-    'openai-api-platform',
-    'anthropic',
-    'anthropic-official-subscription',
-    'anthropic-api-platform',
-    'kimi',
-    'kimi-subscription-key',
-    'kimi-api-platform',
-    'bailian',
-    'bailian-pay-as-you-go',
-    'bailian-token-plan',
-    'bailian-token-plan-team',
-    'bailian-coding-plan',
-    'deepseek',
-    'deepseek-api-platform',
-    'zhipu',
-    'zhipu-api-platform',
-    'zhipu-coding-plan',
-    'ollama',
-    'ollama-local',
-    'custom',
-    'custom-openai-compatible',
-    'custom-anthropic-compatible',
-];
-const PROVIDER_DOCUMENT_ID_SET = new Set(PROVIDER_DOCUMENT_IDS);
+const PROVIDER_DOCUMENT_ID_SET = new Set(AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS);
 export function parseAiConnectionsServiceAccess(value, currentPodUrl) {
     if (!isRecord(value))
         throw new Error('invalid_descriptor');

package/node_modules/@undefineds.co/ai-connections/dist/useAiConnectDialog.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderCredentialSummary, AiProviderOffering } from './ai-connections-client';
+import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderCredentialSummary, AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
 /**
  * Lifecycle of the connect dialog: which offering is being connected, whether the
  * user is creating or editing, and the busy/error state the toolbar and the

package/node_modules/@undefineds.co/ai-connections/package.json

@@ -13,30 +13,17 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
-    "./client": {
-      "types": "./dist/ai-connections-client.d.ts",
-      "import": "./dist/ai-connections-client.js"
-    },
-    "./provider-catalog": {
-      "types": "./dist/provider-catalog.d.ts",
-      "import": "./dist/provider-catalog.js",
-      "require": "./dist/provider-catalog.cjs"
-    },
     "./manifest": {
       "types": "./dist/manifest.d.ts",
       "import": "./dist/manifest.js"
-    },
-    "./client-config": {
-      "types": "./dist/client-config/index.d.ts",
-      "import": "./dist/client-config/index.js",
-      "require": "./dist/client-config/index.cjs"
     }
   },
   "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.json && bun ../../scripts/fix-dist-js-imports.mjs dist && bun build src/client-config/index.ts --target=node --format=cjs --outfile=dist/client-config/index.cjs && bun build src/provider-catalog.ts --target=node --format=cjs --outfile=dist/provider-catalog.cjs",
+    "build": "rm -rf dist && tsc -p tsconfig.json && bun ../../scripts/fix-dist-js-imports.mjs dist",
     "test": "vitest run --config ../../vitest.packages.config.mts"
   },
   "dependencies": {
+    "@undefineds.co/models": "0.2.59",
     "lucide-react": "^0.525.0"
   },
   "peerDependencies": {
@@ -54,15 +41,6 @@
   },
   "typesVersions": {
     "*": {
-      "provider-catalog": [
-        "dist/provider-catalog.d.ts"
-      ],
-      "client": [
-        "dist/ai-connections-client.d.ts"
-      ],
-      "client-config": [
-        "dist/client-config/index.d.ts"
-      ],
       "manifest": [
         "dist/manifest.d.ts"
       ]

package/node_modules/@undefineds.co/{ai-connections → ai-connections-core}/dist/ai-connections-client.d.ts

@@ -1,6 +1,8 @@
 /**
- * Public entry point of the AI connections client
- * (`@undefineds.co/ai-connections/client`).
+ * Public entry point of the AI Connections client protocol. This package is
+ * the shared core: the gateway and the applet both consume it, and the applet
+ * (`@undefineds.co/ai-connections`) adds the components, artwork and wording.
+ * (`@undefineds.co/ai-connections-core/client`).
  *
  * The implementation lives in `./client`, split into wire types, payload
  * normalisation and the request factory. This file stays a barrel — importers
@@ -10,5 +12,12 @@
  */
 export { AI_CONNECTIONS_PROVIDERS } from './client/types';
 export type { AiConnectAttempt, AiConnectionBeginOptions, AiConnectionsClient, AiConnectionsCredential, AiConnectionsMode, AiConnectionsProvider, AiConnectStatus, AiGatewayModel, AiProviderAuthorizationMethod, AiProviderAuthorizationMethodId, AiProviderAuthorizationMethodsSummary, AiProviderConnectionSummary, AiProviderCredentialSummary, AiProviderOffering, AiProviderSummary, AiProviderSummaryStatus, AiQuotaSnapshot, AiQuotaWindow, CreateApiKeyCredentialInput, CreatedGatewayKey, CustomProviderModel, DiscoveredProviderModel, GatewayKeyRecord, ProviderModelDiscovery, TestProviderCredentialInput, UpdateProviderCredentialInput, } from './client/types';
-export { AI_CONNECTIONS_GENERIC_ERROR_MESSAGE, AiConnectionsRequestError, normalizeAiConnectionsErrorMessage, normalizeAiConnectionsThrownError, normalizeProxyUrl, redactProxyUrl, } from './client/normalize';
+export { AiConnectionsRequestError, aiConnectionsErrorCode, normalizeProxyUrl, redactProxyUrl, } from './client/normalize';
 export { createAiConnectionsClient, resolveAiConnectionsApiBase } from './client/request';
+/**
+ * Storage-shape rules for credential rows. They are shared with the Pod adapter
+ * (`ui/src/extensions/XpodAiConnectionsPodStore.ts`) and with the collection
+ * layer that writes the same rows: one envelope format, one provider relation.
+ */
+export { credentialProviderRelation, credentialRowKeyFor, credentialSecretEnvelope, customCredentialProviderRelation, decodeCredentialSecret, providerOfCredentialKey, providerResourceKey, providerResourceReference, } from './credential-storage';
+export type { CredentialSecretEnvelopeInput, CredentialSecretReadInput, } from './credential-storage';

package/node_modules/@undefineds.co/ai-connections-core/dist/ai-connections-client.js

@@ -0,0 +1,21 @@
+/**
+ * Public entry point of the AI Connections client protocol. This package is
+ * the shared core: the gateway and the applet both consume it, and the applet
+ * (`@undefineds.co/ai-connections`) adds the components, artwork and wording.
+ * (`@undefineds.co/ai-connections-core/client`).
+ *
+ * The implementation lives in `./client`, split into wire types, payload
+ * normalisation and the request factory. This file stays a barrel — importers
+ * keep using this path, so the published `./client` export is unchanged — and it
+ * lists the surface explicitly rather than re-exporting whole modules: the
+ * parsers under `./client` are internal, and `export *` would publish them.
+ */
+export { AI_CONNECTIONS_PROVIDERS } from './client/types.js';
+export { AiConnectionsRequestError, aiConnectionsErrorCode, normalizeProxyUrl, redactProxyUrl, } from './client/normalize.js';
+export { createAiConnectionsClient, resolveAiConnectionsApiBase } from './client/request.js';
+/**
+ * Storage-shape rules for credential rows. They are shared with the Pod adapter
+ * (`ui/src/extensions/XpodAiConnectionsPodStore.ts`) and with the collection
+ * layer that writes the same rows: one envelope format, one provider relation.
+ */
+export { credentialProviderRelation, credentialRowKeyFor, credentialSecretEnvelope, customCredentialProviderRelation, decodeCredentialSecret, providerOfCredentialKey, providerResourceKey, providerResourceReference, } from './credential-storage.js';