@undefineds.co/xpod 0.4.12 → 0.4.13

package/dist/acceptance/QleverSemanticConformance.js

@@ -161,8 +161,15 @@ async function prepareAndApplyUpdate(engine, sparql, sourceUri, timeoutMs) {
 }
 const nativeSemanticCaseExecutor = {
     prepareAndApplyUpdate,
+    // The fixture queries a container endpoint (`DEFAULT_BASE_PATH`), and every
+    // `Pod` query that is not inside `GRAPH` reads that container plus its
+    // subgraphs. `scopedUnion` is the dataset mode the product uses for a
+    // container endpoint (`SubgraphSparqlHttpHandler`), so the native authority is
+    // exercised under the same rule as the public authority, which has no dataset
+    // switch and always reads the endpoint scope.
     query: (engine, testCase, timeoutMs) => nativeSparqlQuery(engine, testCase.query, {
         basePath: RdfSemanticConformance_1.DEFAULT_BASE_PATH,
+        defaultDataset: 'scopedUnion',
         operation: (0, RdfSemanticConformance_1.queryOperation)(testCase.acceptMediaType),
         acceptMediaType: testCase.acceptMediaType,
         timeoutMs,

package/dist/api/ai-gateway/providers/OfferingAuthorization.d.ts

@@ -3,7 +3,12 @@ export interface OfferingAuthorizationMethod {
     id: string;
     authMode: 'oauth' | 'deviceCode' | 'local' | 'apiKey';
     connectMode?: 'authorizationCodeOAuth' | 'deviceCodeOAuth' | 'browserAssistedApiKey';
-    label: string;
+    /**
+     * Wording is the applet's (`display-wording.ts` in `@undefineds.co/ai-connections`),
+     * decided from the entry's id. The gateway names the entry and says whether this
+     * deployment can offer it; it does not write the button.
+     */
+    label?: string;
     lifecycle: 'active' | 'unavailable';
     reason?: string;
 }

package/dist/api/ai-gateway/providers/OfferingAuthorization.js

@@ -12,7 +12,6 @@ function subscriptionAuthorizationMethods(deployment, binding) {
             id: 'browser-oauth',
             authMode: 'oauth',
             connectMode: 'authorizationCodeOAuth',
-            label: '浏览器登录',
             lifecycle: deployment === 'local' ? 'active' : 'unavailable',
             ...(deployment === 'local' ? {} : { reason: '浏览器登录需要本机回调，请在本机 Xpod 中使用，或选择设备码登录。' }),
         }] : [];
@@ -22,13 +21,11 @@ function subscriptionAuthorizationMethods(deployment, binding) {
             id: 'device-code',
             authMode: 'deviceCode',
             connectMode: 'deviceCodeOAuth',
-            label: '设备码登录',
             lifecycle: 'active',
         },
         {
             id: 'local-session-import',
             authMode: 'local',
-            label: '已有登录态',
             lifecycle: deployment === 'local' ? 'active' : 'unavailable',
             ...(deployment === 'local' ? {} : { reason: '请在运行本机客户端的 Xpod 上导入登录态。' }),
         },

package/dist/api/ai-gateway/providers/ProviderRegistry.js

@@ -8,7 +8,7 @@ exports.offeringDeclaresUpstreamCapability = offeringDeclaresUpstreamCapability;
 exports.normalizeProviderId = normalizeProviderId;
 const models_1 = require("@undefineds.co/models");
 const defaultEmbeddingProfile_1 = require("../../../ai/service/defaultEmbeddingProfile");
-const provider_catalog_1 = require("@undefineds.co/ai-connections/provider-catalog");
+const provider_catalog_1 = require("@undefineds.co/ai-connections-core/provider-catalog");
 const OfferingAuthorization_1 = require("./OfferingAuthorization");
 exports.OPENAI_SUBSCRIPTION_BASE_URL = 'https://chatgpt.com/backend-api/codex';
 exports.MANAGED_PROVIDER_VOCABULARY = [
@@ -280,7 +280,7 @@ function providerProductsForDeployment(deployment) {
             }
             else if (offering.kind === 'local') {
                 authorizationMethods.push({
-                    id: 'local-service', authMode: 'local', label: '本地服务',
+                    id: 'local-service', authMode: 'local',
                     lifecycle: offering.lifecycle === 'unavailable' ? 'unavailable' : 'active',
                 });
             }

package/dist/api/ai-gateway/service-access/AiConnectionsServiceAccess.d.ts

@@ -1,4 +1,4 @@
-import { AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS } from '@undefineds.co/ai-connections/provider-catalog';
+import { AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS } from '@undefineds.co/ai-connections-core/provider-catalog';
 export declare const AI_CONNECTIONS_APPLET_ID = "co.undefineds.ai-connections";
 /**
  * Provider documents this service may reach. The list is projected from the

package/dist/api/ai-gateway/service-access/AiConnectionsServiceAccess.js

@@ -7,7 +7,7 @@ exports.resolveGatewayAccessKeySecretResourceUrl = resolveGatewayAccessKeySecret
 exports.resolveGatewayAccessKeySparqlEndpoint = resolveGatewayAccessKeySparqlEndpoint;
 exports.isGatewayAccessKeySparqlEndpoint = isGatewayAccessKeySparqlEndpoint;
 const drizzle_solid_1 = require("@undefineds.co/drizzle-solid");
-const provider_catalog_1 = require("@undefineds.co/ai-connections/provider-catalog");
+const provider_catalog_1 = require("@undefineds.co/ai-connections-core/provider-catalog");
 Object.defineProperty(exports, "AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS", { enumerable: true, get: function () { return provider_catalog_1.AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS; } });
 const models_1 = require("@undefineds.co/models");
 exports.AI_CONNECTIONS_APPLET_ID = 'co.undefineds.ai-connections';

package/dist/api/service/AiClientConfigurationService.d.ts

@@ -1,4 +1,4 @@
-import { type AiClientModelReference } from '@undefineds.co/ai-connections/client-config';
+import { type AiClientModelReference } from '@undefineds.co/ai-connections-core/client-config';
 import type { AuthContext } from '../auth/AuthContext';
 export type AiClientId = 'codex' | 'claude-code' | 'pi' | 'codebuddy';
 export interface AiClientConfigurationCapabilityDescriptor {

package/dist/api/service/AiClientConfigurationService.js

@@ -10,7 +10,7 @@ const node_crypto_1 = require("node:crypto");
 const node_path_1 = __importDefault(require("node:path"));
 const node_fs_1 = require("node:fs");
 const node_child_process_1 = require("node:child_process");
-const client_config_1 = require("@undefineds.co/ai-connections/client-config");
+const client_config_1 = require("@undefineds.co/ai-connections-core/client-config");
 const PLAN_SECRET_PLACEHOLDER = '[redacted]';
 const MANUAL_INSTRUCTIONS = 'Manual client setup is available when this host cannot safely write local coding-client files.';
 const CLIENT_LABELS = {

package/dist/storage/rdf/PostgresRdfEngine.js

@@ -5716,12 +5716,18 @@ class PostgresRdfEngine {
                 continue;
             }
             if ((0, types_1.isTerm)(value)) {
-                // An access-scoped DefaultGraph represents the logical union of Pod
-                // source documents. Their physical facts retain named graph IDs, so
-                // constraining graph_id to the RDF default-graph term incorrectly
-                // turns every normal SPARQL query into an empty result.
+                // A query that names no graph asks its own scope's container, so the
+                // scope's container prefix becomes the graph prefix: Pod documents are
+                // stored as named graphs (their document IRI) and a client cannot name
+                // one, because the SPARQL endpoint takes no dataset parameter. Without a
+                // prefix there is nothing to scope by and the condition stays off, which
+                // is what used to keep ordinary Pod queries from returning nothing.
+                // See docs/rdf-graph-semantics.md.
                 const sourceScope = explicitSourceScope ?? pattern.sourceScope;
                 if (key === 'graph' && value.termType === 'DefaultGraph' && sourceScopeHasFilters(sourceScope)) {
+                    if (sourceScope?.sourcePrefix) {
+                        graphPrefix = sourceScope.sourcePrefix;
+                    }
                     continue;
                 }
                 const id = await this.requireDictionary().find(value);

package/dist/storage/rdf/RdfAccessScope.js

@@ -168,7 +168,21 @@ function scopeOptionalGroup(group, scope, state) {
 }
 function scopePattern(pattern, filters, scope, state) {
     const sourceScope = scopeFactSources(pattern.sourceScope, scope);
-    const graph = pattern.graph ?? { $startsWith: scope.basePath };
+    const requested = pattern.graph;
+    // A container IRI names a container, not a graph: asking for it asks for that
+    // container and its subgraphs (LDP containment). The trailing slash is what
+    // keeps `<pod/a/>` from matching `<pod/ab`, and a document IRI stays exact.
+    // Resolving it here rather than inside one engine means every query path - the
+    // public authority, the Pod endpoint, a direct engine query - reads the same
+    // rule. See docs/rdf-graph-semantics.md.
+    const containerPrefix = (0, types_1.isTerm)(requested)
+        && requested.termType === 'NamedNode'
+        && requested.value.endsWith('/')
+        ? { $startsWith: requested.value }
+        : undefined;
+    const graph = containerPrefix
+        ?? pattern.graph
+        ?? { $startsWith: scope.basePath };
     if (isVariable(graph)) {
         addGraphAccessFilters(filters, graph.variable, scope);
         return {

package/dist/storage/rdf/RdfEngineRdfJsSource.js

@@ -64,7 +64,15 @@ class RdfEngineMatchIterator extends asynciterator_1.BufferedIterator {
 }
 const SLOT_NAMES = ['subject', 'predicate', 'object', 'graph'];
 async function executeMatch(rdfEngine, terms, options) {
-    const select = SLOT_NAMES.filter((slot) => isUnboundMatchTerm(terms[slot]));
+    // A graph term that names a container - or names nothing at all - is a *prefix*
+    // the facts must fall under, not a graph the rows belong to. Reporting it back
+    // would show the caller a graph that no triple is stored in (the container IRI,
+    // or the default-graph marker); the row's own graph is the truthful answer and
+    // is always under that prefix. See docs/rdf-graph-semantics.md.
+    const graphIsScopedPrefix = isUnboundMatchTerm(terms.graph)
+        || terms.graph.termType === 'DefaultGraph'
+        || (terms.graph.termType === 'NamedNode' && terms.graph.value.endsWith('/'));
+    const select = SLOT_NAMES.filter((slot) => isUnboundMatchTerm(terms[slot]) || (slot === 'graph' && graphIsScopedPrefix));
     const result = await queryWithAbort(rdfEngine, (0, RdfAccessScope_1.applyRdfAccessScope)({
         patterns: [matchPattern(terms)],
         select,
@@ -72,7 +80,7 @@ async function executeMatch(rdfEngine, terms, options) {
     assertNotAborted(options.signal);
     return result.bindings.map((row) => {
         assertNotAborted(options.signal);
-        return quad(requireQuadSubject(isUnboundMatchTerm(terms.subject) ? requireBinding(row, 'subject') : terms.subject), requireQuadPredicate(isUnboundMatchTerm(terms.predicate) ? requireBinding(row, 'predicate') : terms.predicate), requireQuadObject(isUnboundMatchTerm(terms.object) ? requireBinding(row, 'object') : terms.object), requireQuadGraph(isUnboundMatchTerm(terms.graph) ? (row.graph ?? defaultGraph()) : terms.graph));
+        return quad(requireQuadSubject(isUnboundMatchTerm(terms.subject) ? requireBinding(row, 'subject') : terms.subject), requireQuadPredicate(isUnboundMatchTerm(terms.predicate) ? requireBinding(row, 'predicate') : terms.predicate), requireQuadObject(isUnboundMatchTerm(terms.object) ? requireBinding(row, 'object') : terms.object), requireQuadGraph(graphIsScopedPrefix ? (row.graph ?? defaultGraph()) : terms.graph));
     });
 }
 async function executeCount(rdfEngine, terms, options) {

package/node_modules/@undefineds.co/ai-connections/dist/AiApiKeyPool.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectAttempt, AiProviderCredentialSummary, AiProviderOffering } from './ai-connections-client';
+import type { AiConnectAttempt, AiProviderCredentialSummary, AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
 import type { AiProviderDefinition } from './controller';
 import type { ProviderConnectionState } from './AiProviderCard';
 export declare function AiApiKeyPool({ definition, offering, createOfferings, status, credentials, attempt, apiKey, baseUrl, busy, disabled, error, onApiKeyChange, onBaseUrlChange, onBeginApiKey, onBeginBrowser, onSaveApiKey, onDisconnect, onCreateApiKeyCredential, onUpdateCredential, initialEditing, initialCreate, onSavingChange, onCloseEdit, }: {

package/node_modules/@undefineds.co/ai-connections/dist/AiApiKeyPool.js

@@ -2,7 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { useEffect, useRef, useState } from 'react';
 import { Button, Input, cn } from '@undefineds.co/shared-ui';
 import { ExternalLink, Eye, EyeOff, KeyRound, Loader2, LogOut, Plus, RotateCw } from 'lucide-react';
-import { normalizeProxyUrl } from './ai-connections-client.js';
+import { normalizeProxyUrl } from '@undefineds.co/ai-connections-core/client';
 import { offeringTitle } from './offering-label.js';
 import { authorizationMethodsForOffering, isApiKeyMethod } from './authorization-methods.js';
 import { nextCredentialPriority } from './credential-labels.js';

package/node_modules/@undefineds.co/ai-connections/dist/AiAuthorizationActions.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderOffering } from './ai-connections-client';
+import type { AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
 /**
  * The offering's own entries, one button per declared `authorizationMethod`.
  *

package/node_modules/@undefineds.co/ai-connections/dist/AiClientConfigurationSection.d.ts

@@ -1,5 +1,5 @@
 import type { AiClientConfigurationModel } from '@undefineds.co/extension-sdk/web';
-import { normalizeV1Endpoint } from './endpoint-urls';
+import { normalizeV1Endpoint } from '@undefineds.co/ai-connections-core/endpoint-urls';
 export declare const AI_CONNECTIONS_CLIENTS: readonly ["codex", "claude-code", "pi", "codebuddy"];
 export type AiConnectionsClientId = (typeof AI_CONNECTIONS_CLIENTS)[number];
 export interface AiClientConfigurationStatus {

package/node_modules/@undefineds.co/ai-connections/dist/AiClientConfigurationSection.js

@@ -2,9 +2,9 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useRef, useState } from 'react';
 import { Badge, Button, Input, } from '@undefineds.co/shared-ui';
 import { RotateCcw, SquareTerminal } from 'lucide-react';
-import { normalizeAiConnectionsThrownError } from './ai-connections-client.js';
+import { aiConnectionsErrorMessage } from './error-wording.js';
 import { getClientAvatar } from './client-visuals.js';
-import { normalizeMessagesEndpoint, normalizeV1Endpoint } from './endpoint-urls.js';
+import { normalizeMessagesEndpoint, normalizeV1Endpoint } from '@undefineds.co/ai-connections-core/endpoint-urls';
 import { AiCopyButton } from './AiCopyButton.js';
 export const AI_CONNECTIONS_CLIENTS = ['codex', 'claude-code', 'pi', 'codebuddy'];
 export const AI_CLIENT_LABELS = {
@@ -246,5 +246,5 @@ function failedAndRestoredError(error) {
         error.code === 'verification_failed_restored');
 }
 function errorMessage(error) {
-    return normalizeAiConnectionsThrownError(error);
+    return aiConnectionsErrorMessage(error);
 }

package/node_modules/@undefineds.co/ai-connections/dist/AiConnectDialog.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderCredentialSummary, AiProviderOffering } from './ai-connections-client';
+import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderCredentialSummary, AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
 import type { AiProviderDefinition } from './controller';
 import type { ProviderConnectionState } from './AiProviderCard';
 import type { AiOfferingActionError } from './AiCredentialPoolSection';

package/node_modules/@undefineds.co/ai-connections/dist/AiConnectionsPanel.d.ts

@@ -1,4 +1,4 @@
-import { type AiConnectionsClient, type AiConnectionsProvider, type AiProviderConnectionSummary, type AiProviderSummary } from './ai-connections-client';
+import { type AiConnectionsClient, type AiConnectionsProvider, type AiProviderConnectionSummary, type AiProviderSummary } from '@undefineds.co/ai-connections-core/client';
 import { type AiConnectionsWorkspaceSection, type ProviderProductState } from './controller';
 import type { AiClientConfigurationBridge } from './AiClientConfigurationSection';
 import { type CredentialRow } from './collections';

package/node_modules/@undefineds.co/ai-connections/dist/AiConnectionsPanel.js

@@ -1,8 +1,8 @@
 import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
 import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
 import { Toaster, toast, } from '@undefineds.co/shared-ui';
-import { normalizeAiConnectionsThrownError, } from './ai-connections-client.js';
 import { PROVIDERS, } from './controller.js';
+import { aiConnectionsErrorMessage } from './error-wording.js';
 import { offeringTitle } from './offering-label.js';
 import { AiProviderCard, } from './AiProviderCard.js';
 import { AiModelEditorDialog, } from './AiModelEditorDialog.js';
@@ -878,7 +878,7 @@ function errorMessage(error) {
     if (error instanceof TypeError && /failed to fetch|fetch failed|networkerror|load failed/i.test(error.message)) {
         return '暂时无法连接 Xpod，请在连接恢复后确认操作结果，再重试。';
     }
-    const message = normalizeAiConnectionsThrownError(error);
+    const message = aiConnectionsErrorMessage(error);
     return message === 'AI Connection request failed. Please try again.'
         ? '请求未完成。请确认 Xpod 正在运行且登录仍有效，然后重试。'
         : message;

package/node_modules/@undefineds.co/ai-connections/dist/AiCredentialPoolSection.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderCredentialSummary, AiProviderOffering, AiProviderSummary, AiQuotaSnapshot } from './ai-connections-client';
+import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderCredentialSummary, AiProviderOffering, AiProviderSummary, AiQuotaSnapshot } from '@undefineds.co/ai-connections-core/client';
 import type { AiProviderDefinition } from './controller';
 import type { ProviderConnectionState } from './AiProviderCard';
 export interface AiOfferingActionError {

package/node_modules/@undefineds.co/ai-connections/dist/AiCredentialRow.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from 'react';
-import type { AiProviderCredentialSummary } from './ai-connections-client';
+import type { AiProviderCredentialSummary } from '@undefineds.co/ai-connections-core/client';
 export declare function AiCredentialRow({ credential, label, busy, disabled, dragHandle, kindLabel, quota, onToggle, onTest, onEdit, onDelete, deleteAriaLabel, }: {
     credential: AiProviderCredentialSummary;
     label: string;

package/node_modules/@undefineds.co/ai-connections/dist/AiCustomProviderDialog.d.ts

@@ -1,4 +1,4 @@
-import type { CreateApiKeyCredentialInput } from './ai-connections-client';
+import type { CreateApiKeyCredentialInput } from '@undefineds.co/ai-connections-core/client';
 export type CustomProviderCompatibility = 'auto' | 'openai' | 'anthropic';
 export interface CustomProviderValue extends CreateApiKeyCredentialInput {
     compatibility: CustomProviderCompatibility;

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeyRow.d.ts

@@ -1,4 +1,4 @@
-import type { GatewayKeyRecord } from './ai-connections-client';
+import type { GatewayKeyRecord } from '@undefineds.co/ai-connections-core/client';
 import { type AiConnectionsClientId } from './AiClientConfigurationSection';
 export interface AiGatewayKeyBinding {
     clientId?: AiConnectionsClientId;

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeysSection.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectionsClient, AiGatewayModel } from './ai-connections-client';
+import type { AiConnectionsClient, AiGatewayModel } from '@undefineds.co/ai-connections-core/client';
 import { type AiClientConfigurationBridge } from './AiClientConfigurationSection';
 import { type GatewayModelSelection } from './AiGatewayModelsSection';
 /**

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayModelsSection.d.ts

@@ -1,4 +1,4 @@
-import type { AiGatewayModel } from './ai-connections-client';
+import type { AiGatewayModel } from '@undefineds.co/ai-connections-core/client';
 /**
  * What the gateway list shares with the provider pages.
  *

package/node_modules/@undefineds.co/ai-connections/dist/AiOfferingDetails.d.ts

@@ -1,4 +1,4 @@
-import type { AiProviderAuthorizationMethod, AiProviderOffering } from './ai-connections-client';
+import type { AiProviderAuthorizationMethod, AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
 export declare function AiOfferingDetails({ offering, methods }: {
     offering: AiProviderOffering;
     methods?: AiProviderAuthorizationMethod[];

package/node_modules/@undefineds.co/ai-connections/dist/AiProviderCard.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectAttempt, AiConnectionsMode, AiGatewayModel, AiProviderCredentialSummary, AiProviderAuthorizationMethod, AiProviderOffering, AiProviderSummary } from './ai-connections-client';
+import type { AiConnectAttempt, AiConnectionsMode, AiGatewayModel, AiProviderCredentialSummary, AiProviderAuthorizationMethod, AiProviderOffering, AiProviderSummary } from '@undefineds.co/ai-connections-core/client';
 import { type AiOfferingActionError, type AiOfferingQuotaState } from './AiCredentialPoolSection';
 export type { AiProviderDefinition } from './controller';
 import type { AiProviderDefinition } from './controller';

package/node_modules/@undefineds.co/ai-connections/dist/AiQuotaCard.d.ts

@@ -1,4 +1,4 @@
-import type { AiQuotaSnapshot } from './ai-connections-client';
+import type { AiQuotaSnapshot } from '@undefineds.co/ai-connections-core/client';
 export declare function AiQuotaCard({ providerName, offeringName, quota, busy, disabled, credentialLabel, multiple, compact, paused, error, onRefresh, }: {
     providerName: string;
     offeringName: string;

package/node_modules/@undefineds.co/ai-connections/dist/AiSortableCredentialList.d.ts

@@ -1,5 +1,5 @@
 import { type ReactNode } from 'react';
-import type { AiProviderCredentialSummary } from './ai-connections-client';
+import type { AiProviderCredentialSummary } from '@undefineds.co/ai-connections-core/client';
 export declare function AiSortableCredentialList({ credentials, disabled, onMove, children }: {
     credentials: AiProviderCredentialSummary[];
     disabled: boolean;

package/node_modules/@undefineds.co/ai-connections/dist/authorization-methods.d.ts

@@ -1,16 +1,18 @@
-import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderOffering } from './ai-connections-client';
+import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
 /**
- * Authorization methods an offering exposes. An offering that declares them
- * keeps that list - including an empty one, which is how the server says "this
- * offering has no connect entry here" instead of publishing an entry that
- * cannot be used. The rest derive one method per entry of `authModes`, which is
- * what a payload without the field (a catalog consumer that never asked the
- * server) falls back to.
+ * Authorization methods an offering exposes, worded for display.
  *
- * The derivation is therefore a fallback for payloads that carry no
- * `authorizationMethods` at all, so it must stay a projection of the offering's
- * own data: no label is invented for a provider, and the wording mirrors the
- * server's own naming for the same `authModes`.
+ * An offering that declares them keeps that list - including an empty one, which
+ * is how the server says "this offering has no connect entry here" instead of
+ * publishing an entry that cannot be used. The rest derive one method per entry
+ * of `authModes`, which is what a payload without the field (a catalog consumer
+ * that never asked the server) falls back to.
+ *
+ * Neither branch carries wording of its own: every path that renders a connect
+ * entry goes through here, so this is the one place the applet's wording table
+ * is applied, and an entry the table does not know keeps whatever the payload
+ * declared - or stays unrendered, which is how "the offering did not ask for
+ * this button" has always been said.
  */
 export declare function authorizationMethodsForOffering(offering: AiProviderOffering): AiProviderAuthorizationMethod[];
 export declare function connectModeForMethod(method: AiProviderAuthorizationMethod): AiConnectionsMode | undefined;

package/node_modules/@undefineds.co/ai-connections/dist/authorization-methods.js

@@ -1,17 +1,23 @@
+import { withAuthorizationMethodLabels } from './display-wording.js';
 /**
- * Authorization methods an offering exposes. An offering that declares them
- * keeps that list - including an empty one, which is how the server says "this
- * offering has no connect entry here" instead of publishing an entry that
- * cannot be used. The rest derive one method per entry of `authModes`, which is
- * what a payload without the field (a catalog consumer that never asked the
- * server) falls back to.
+ * Authorization methods an offering exposes, worded for display.
  *
- * The derivation is therefore a fallback for payloads that carry no
- * `authorizationMethods` at all, so it must stay a projection of the offering's
- * own data: no label is invented for a provider, and the wording mirrors the
- * server's own naming for the same `authModes`.
+ * An offering that declares them keeps that list - including an empty one, which
+ * is how the server says "this offering has no connect entry here" instead of
+ * publishing an entry that cannot be used. The rest derive one method per entry
+ * of `authModes`, which is what a payload without the field (a catalog consumer
+ * that never asked the server) falls back to.
+ *
+ * Neither branch carries wording of its own: every path that renders a connect
+ * entry goes through here, so this is the one place the applet's wording table
+ * is applied, and an entry the table does not know keeps whatever the payload
+ * declared - or stays unrendered, which is how "the offering did not ask for
+ * this button" has always been said.
  */
 export function authorizationMethodsForOffering(offering) {
+    return withAuthorizationMethodLabels(declaredOrDerivedMethods(offering));
+}
+function declaredOrDerivedMethods(offering) {
     if (Array.isArray(offering.authorizationMethods))
         return offering.authorizationMethods;
     const lifecycle = offering.lifecycle === 'unavailable' ? 'unavailable' : 'active';
@@ -21,7 +27,6 @@ export function authorizationMethodsForOffering(offering) {
                 id: 'api-key',
                 authMode: 'apiKey',
                 connectMode: 'browserAssistedApiKey',
-                label: 'API Key',
                 lifecycle,
             };
         }
@@ -30,7 +35,6 @@ export function authorizationMethodsForOffering(offering) {
             return {
                 id: localService ? 'local-service' : 'local-session-import',
                 authMode: 'local',
-                label: localService ? '本地服务' : '已有登录态',
                 lifecycle,
             };
         }
@@ -38,7 +42,6 @@ export function authorizationMethodsForOffering(offering) {
             id: 'device-code',
             authMode: mode,
             connectMode: 'deviceCodeOAuth',
-            label: '浏览器登录',
             lifecycle,
         };
     });

package/node_modules/@undefineds.co/ai-connections/dist/collection-runtime.d.ts

@@ -1,5 +1,5 @@
 import type { AiConnectionsPodStore, WebExtensionHost } from '@undefineds.co/extension-sdk/web';
-import type { AiConnectionsClient } from './ai-connections-client';
+import type { AiConnectionsClient } from '@undefineds.co/ai-connections-core/client';
 import { type CredentialCollection } from './collections';
 /**
  * The half of the credentials table that needs the collection layer at runtime.

package/node_modules/@undefineds.co/ai-connections/dist/collection-runtime.js

@@ -1,9 +1,9 @@
 import { credentialDescriptor, credentialResource } from '@undefineds.co/models';
 import { rowKeyOf } from '@undefineds.co/pod-collections';
-import { credentialProviderRelation, credentialRowKeyFor, customCredentialProviderRelation, } from './credential-storage.js';
+import { credentialProviderRelation, credentialRowKeyFor, customCredentialProviderRelation, } from '@undefineds.co/ai-connections-core/client';
 import { credentialSummaryFromRow } from './collections.js';
-import { normalizeProxyUrl } from './client/normalize.js';
-import { credentialOfferingMetadata, defaultOfferingFor, offeringBaseUrl, storedOfferingIdFor, } from './provider-catalog.js';
+import { normalizeProxyUrl } from '@undefineds.co/ai-connections-core/client';
+import { credentialOfferingMetadata, defaultOfferingFor, offeringBaseUrl, storedOfferingIdFor, } from '@undefineds.co/ai-connections-core/provider-catalog';
 /**
  * The half of the credentials table that needs the collection layer at runtime.
  *

package/node_modules/@undefineds.co/ai-connections/dist/collections.d.ts

@@ -1,6 +1,6 @@
 import { credentialDescriptor } from '@undefineds.co/models';
 import type { PodCollection, RowOf } from '@undefineds.co/pod-collections';
-import type { AiConnectionsProvider, AiProviderCredentialSummary, AiProviderSummary } from './ai-connections-client';
+import type { AiConnectionsProvider, AiProviderCredentialSummary, AiProviderSummary } from '@undefineds.co/ai-connections-core/client';
 /**
  * The credentials table, declared once (`docs/pod-collections.md` §6.4-2).
  *

package/node_modules/@undefineds.co/ai-connections/dist/collections.js

@@ -1,8 +1,8 @@
 import { credentialResource } from '@undefineds.co/models';
 import { useSyncExternalStore } from 'react';
-import { AI_CONNECTIONS_PROVIDERS } from './ai-connections-client.js';
-import { defaultOfferingFor } from './provider-catalog.js';
-import { providerOfCredentialKey, providerResourceKey } from './credential-storage.js';
+import { AI_CONNECTIONS_PROVIDERS } from '@undefineds.co/ai-connections-core/client';
+import { defaultOfferingFor } from '@undefineds.co/ai-connections-core/provider-catalog';
+import { providerOfCredentialKey, providerResourceKey } from '@undefineds.co/ai-connections-core/client';
 /**
  * Live rows for the credentials table. Re-renders on sync and on optimistic
  * writes, because the source is the collection's own change feed.

package/node_modules/@undefineds.co/ai-connections/dist/controller.d.ts

@@ -1,5 +1,5 @@
 import type { SolidLiveUpdateState, WebExtensionHost } from '@undefineds.co/extension-sdk/web';
-import { type AiConnectionsClient, type AiConnectionsProvider, type AiProviderConnectionSummary, type AiProviderSummary } from './ai-connections-client';
+import { type AiConnectionsClient, type AiConnectionsProvider, type AiProviderConnectionSummary, type AiProviderSummary } from '@undefineds.co/ai-connections-core/client';
 import type { AiClientConfigurationBridge } from './AiClientConfigurationSection';
 import { type CredentialRow } from './collections';
 import type { PodCollection } from '@undefineds.co/pod-collections';

package/node_modules/@undefineds.co/ai-connections/dist/controller.js

@@ -1,5 +1,6 @@
 import { useSyncExternalStore } from 'react';
-import { AI_CONNECTIONS_PROVIDERS, AiConnectionsRequestError, createAiConnectionsClient, normalizeAiConnectionsThrownError, } from './ai-connections-client.js';
+import { AI_CONNECTIONS_PROVIDERS, AiConnectionsRequestError, createAiConnectionsClient, } from '@undefineds.co/ai-connections-core/client';
+import { aiConnectionsErrorMessage } from './error-wording.js';
 import { credentialCollectionRuntime, } from './collections.js';
 /**
  * Provider pages explain themselves through the header's ⓘ tooltip, so each
@@ -1014,7 +1015,7 @@ function isDefined(value) {
     return value !== undefined;
 }
 function errorMessage(error) {
-    return normalizeAiConnectionsThrownError(error);
+    return aiConnectionsErrorMessage(error);
 }
 /** The wrapper carries the OIDC client id; parsing it needs no stored secret. */
 function clientIdFromApiKey(apiKey) {

package/node_modules/@undefineds.co/ai-connections/dist/credential-labels.d.ts

@@ -1,4 +1,4 @@
-import type { AiProviderCredentialSummary } from './ai-connections-client';
+import type { AiProviderCredentialSummary } from '@undefineds.co/ai-connections-core/client';
 /** Highest priority first: a new credential joins the end of the pool. */
 export declare function nextCredentialPriority(credentials: AiProviderCredentialSummary[]): number;
 export declare function credentialDisplayLabel(credential: AiProviderCredentialSummary): string;

package/node_modules/@undefineds.co/ai-connections/dist/display-wording.d.ts

@@ -0,0 +1,20 @@
+import type { AiConnectionsProvider, AiProviderAuthorizationMethod } from '@undefineds.co/ai-connections-core/client';
+/**
+ * Wording for one connect entry.
+ *
+ * A payload that declares its own wording keeps it: the entry's own name is the
+ * more specific statement, and it is how a provider the user configured names
+ * its entry, and how one offering renames a shared action for its context. The
+ * table only fills the gap the shared core deliberately leaves - it names the
+ * action by `id` and no longer writes the button.
+ */
+export declare function authorizationMethodLabel(method: AiProviderAuthorizationMethod): string | undefined;
+/** Fills in the wording of every entry that has one. */
+export declare function withAuthorizationMethodLabels(methods: readonly AiProviderAuthorizationMethod[]): AiProviderAuthorizationMethod[];
+/**
+ * The name this applet shows for a provider. English for the providers whose
+ * product name is English, Chinese where the product is known by its Chinese
+ * name - a display decision, so it lives with the display layer instead of
+ * travelling in every payload.
+ */
+export declare function providerDisplayName(provider: AiConnectionsProvider): string;