@undefineds.co/xpod 0.4.12 → 0.4.14

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeyRow.d.ts

@@ -1,4 +1,4 @@
-import type { GatewayKeyRecord } from './ai-connections-client';
+import type { GatewayKeyRecord } from './contract/ai-connections-client';
 import { type AiConnectionsClientId } from './AiClientConfigurationSection';
 export interface AiGatewayKeyBinding {
     clientId?: AiConnectionsClientId;

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeysSection.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectionsClient, AiGatewayModel } from './ai-connections-client';
+import type { AiConnectionsClient, AiGatewayModel } from './contract/ai-connections-client';
 import { type AiClientConfigurationBridge } from './AiClientConfigurationSection';
 import { type GatewayModelSelection } from './AiGatewayModelsSection';
 /**

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayModelsSection.d.ts

@@ -1,4 +1,4 @@
-import type { AiGatewayModel } from './ai-connections-client';
+import type { AiGatewayModel } from './contract/ai-connections-client';
 /**
  * What the gateway list shares with the provider pages.
  *

package/node_modules/@undefineds.co/ai-connections/dist/AiOfferingDetails.d.ts

@@ -1,4 +1,4 @@
-import type { AiProviderAuthorizationMethod, AiProviderOffering } from './ai-connections-client';
+import type { AiProviderAuthorizationMethod, AiProviderOffering } from './contract/ai-connections-client';
 export declare function AiOfferingDetails({ offering, methods }: {
     offering: AiProviderOffering;
     methods?: AiProviderAuthorizationMethod[];

package/node_modules/@undefineds.co/ai-connections/dist/AiProviderCard.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectAttempt, AiConnectionsMode, AiGatewayModel, AiProviderCredentialSummary, AiProviderAuthorizationMethod, AiProviderOffering, AiProviderSummary } from './ai-connections-client';
+import type { AiConnectAttempt, AiConnectionsMode, AiGatewayModel, AiProviderCredentialSummary, AiProviderAuthorizationMethod, AiProviderOffering, AiProviderSummary } from './contract/ai-connections-client';
 import { type AiOfferingActionError, type AiOfferingQuotaState } from './AiCredentialPoolSection';
 export type { AiProviderDefinition } from './controller';
 import type { AiProviderDefinition } from './controller';

package/node_modules/@undefineds.co/ai-connections/dist/AiQuotaCard.d.ts

@@ -1,4 +1,4 @@
-import type { AiQuotaSnapshot } from './ai-connections-client';
+import type { AiQuotaSnapshot } from './contract/ai-connections-client';
 export declare function AiQuotaCard({ providerName, offeringName, quota, busy, disabled, credentialLabel, multiple, compact, paused, error, onRefresh, }: {
     providerName: string;
     offeringName: string;

package/node_modules/@undefineds.co/ai-connections/dist/AiSortableCredentialList.d.ts

@@ -1,5 +1,5 @@
 import { type ReactNode } from 'react';
-import type { AiProviderCredentialSummary } from './ai-connections-client';
+import type { AiProviderCredentialSummary } from './contract/ai-connections-client';
 export declare function AiSortableCredentialList({ credentials, disabled, onMove, children }: {
     credentials: AiProviderCredentialSummary[];
     disabled: boolean;

package/node_modules/@undefineds.co/ai-connections/dist/authorization-methods.d.ts

@@ -1,16 +1,18 @@
-import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderOffering } from './ai-connections-client';
+import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderOffering } from './contract/ai-connections-client';
 /**
- * Authorization methods an offering exposes. An offering that declares them
- * keeps that list - including an empty one, which is how the server says "this
- * offering has no connect entry here" instead of publishing an entry that
- * cannot be used. The rest derive one method per entry of `authModes`, which is
- * what a payload without the field (a catalog consumer that never asked the
- * server) falls back to.
+ * Authorization methods an offering exposes, worded for display.
  *
- * The derivation is therefore a fallback for payloads that carry no
- * `authorizationMethods` at all, so it must stay a projection of the offering's
- * own data: no label is invented for a provider, and the wording mirrors the
- * server's own naming for the same `authModes`.
+ * An offering that declares them keeps that list - including an empty one, which
+ * is how the server says "this offering has no connect entry here" instead of
+ * publishing an entry that cannot be used. The rest derive one method per entry
+ * of `authModes`, which is what a payload without the field (a catalog consumer
+ * that never asked the server) falls back to.
+ *
+ * Neither branch carries wording of its own: every path that renders a connect
+ * entry goes through here, so this is the one place the applet's wording table
+ * is applied, and an entry the table does not know keeps whatever the payload
+ * declared - or stays unrendered, which is how "the offering did not ask for
+ * this button" has always been said.
  */
 export declare function authorizationMethodsForOffering(offering: AiProviderOffering): AiProviderAuthorizationMethod[];
 export declare function connectModeForMethod(method: AiProviderAuthorizationMethod): AiConnectionsMode | undefined;

package/node_modules/@undefineds.co/ai-connections/dist/authorization-methods.js

@@ -1,17 +1,23 @@
+import { withAuthorizationMethodLabels } from './display-wording.js';
 /**
- * Authorization methods an offering exposes. An offering that declares them
- * keeps that list - including an empty one, which is how the server says "this
- * offering has no connect entry here" instead of publishing an entry that
- * cannot be used. The rest derive one method per entry of `authModes`, which is
- * what a payload without the field (a catalog consumer that never asked the
- * server) falls back to.
+ * Authorization methods an offering exposes, worded for display.
  *
- * The derivation is therefore a fallback for payloads that carry no
- * `authorizationMethods` at all, so it must stay a projection of the offering's
- * own data: no label is invented for a provider, and the wording mirrors the
- * server's own naming for the same `authModes`.
+ * An offering that declares them keeps that list - including an empty one, which
+ * is how the server says "this offering has no connect entry here" instead of
+ * publishing an entry that cannot be used. The rest derive one method per entry
+ * of `authModes`, which is what a payload without the field (a catalog consumer
+ * that never asked the server) falls back to.
+ *
+ * Neither branch carries wording of its own: every path that renders a connect
+ * entry goes through here, so this is the one place the applet's wording table
+ * is applied, and an entry the table does not know keeps whatever the payload
+ * declared - or stays unrendered, which is how "the offering did not ask for
+ * this button" has always been said.
  */
 export function authorizationMethodsForOffering(offering) {
+    return withAuthorizationMethodLabels(declaredOrDerivedMethods(offering));
+}
+function declaredOrDerivedMethods(offering) {
     if (Array.isArray(offering.authorizationMethods))
         return offering.authorizationMethods;
     const lifecycle = offering.lifecycle === 'unavailable' ? 'unavailable' : 'active';
@@ -21,7 +27,6 @@ export function authorizationMethodsForOffering(offering) {
                 id: 'api-key',
                 authMode: 'apiKey',
                 connectMode: 'browserAssistedApiKey',
-                label: 'API Key',
                 lifecycle,
             };
         }
@@ -30,7 +35,6 @@ export function authorizationMethodsForOffering(offering) {
             return {
                 id: localService ? 'local-service' : 'local-session-import',
                 authMode: 'local',
-                label: localService ? '本地服务' : '已有登录态',
                 lifecycle,
             };
         }
@@ -38,7 +42,6 @@ export function authorizationMethodsForOffering(offering) {
             id: 'device-code',
             authMode: mode,
             connectMode: 'deviceCodeOAuth',
-            label: '浏览器登录',
             lifecycle,
         };
     });

package/node_modules/@undefineds.co/ai-connections/dist/collection-runtime.d.ts

@@ -1,5 +1,5 @@
 import type { AiConnectionsPodStore, WebExtensionHost } from '@undefineds.co/extension-sdk/web';
-import type { AiConnectionsClient } from './ai-connections-client';
+import type { AiConnectionsClient } from './contract/ai-connections-client';
 import { type CredentialCollection } from './collections';
 /**
  * The half of the credentials table that needs the collection layer at runtime.

package/node_modules/@undefineds.co/ai-connections/dist/collection-runtime.js

@@ -1,9 +1,9 @@
 import { credentialDescriptor, credentialResource } from '@undefineds.co/models';
 import { rowKeyOf } from '@undefineds.co/pod-collections';
-import { credentialProviderRelation, credentialRowKeyFor, customCredentialProviderRelation, } from './credential-storage.js';
+import { credentialProviderRelation, credentialRowKeyFor, customCredentialProviderRelation, } from './contract/ai-connections-client.js';
 import { credentialSummaryFromRow } from './collections.js';
-import { normalizeProxyUrl } from './client/normalize.js';
-import { credentialOfferingMetadata, defaultOfferingFor, offeringBaseUrl, storedOfferingIdFor, } from './provider-catalog.js';
+import { normalizeProxyUrl } from './contract/ai-connections-client.js';
+import { credentialOfferingMetadata, defaultOfferingFor, offeringBaseUrl, storedOfferingIdFor, } from './contract/provider-catalog.js';
 /**
  * The half of the credentials table that needs the collection layer at runtime.
  *

package/node_modules/@undefineds.co/ai-connections/dist/collections.d.ts

@@ -1,6 +1,6 @@
 import { credentialDescriptor } from '@undefineds.co/models';
 import type { PodCollection, RowOf } from '@undefineds.co/pod-collections';
-import type { AiConnectionsProvider, AiProviderCredentialSummary, AiProviderSummary } from './ai-connections-client';
+import type { AiConnectionsProvider, AiProviderCredentialSummary, AiProviderSummary } from './contract/ai-connections-client';
 /**
  * The credentials table, declared once (`docs/pod-collections.md` §6.4-2).
  *

package/node_modules/@undefineds.co/ai-connections/dist/collections.js

@@ -1,8 +1,8 @@
 import { credentialResource } from '@undefineds.co/models';
 import { useSyncExternalStore } from 'react';
-import { AI_CONNECTIONS_PROVIDERS } from './ai-connections-client.js';
-import { defaultOfferingFor } from './provider-catalog.js';
-import { providerOfCredentialKey, providerResourceKey } from './credential-storage.js';
+import { AI_CONNECTIONS_PROVIDERS } from './contract/ai-connections-client.js';
+import { defaultOfferingFor } from './contract/provider-catalog.js';
+import { providerOfCredentialKey, providerResourceKey } from './contract/ai-connections-client.js';
 /**
  * Live rows for the credentials table. Re-renders on sync and on optimistic
  * writes, because the source is the collection's own change feed.

package/node_modules/@undefineds.co/ai-connections/dist/{ai-connections-client.d.ts → contract/ai-connections-client.d.ts}

@@ -1,5 +1,7 @@
 /**
- * Public entry point of the AI connections client
+ * Public entry point of the AI Connections client protocol. This package is
+ * the shared core: the gateway and the applet both consume it, and the applet
+ * (`@undefineds.co/ai-connections`) adds the components, artwork and wording.
  * (`@undefineds.co/ai-connections/client`).
  *
  * The implementation lives in `./client`, split into wire types, payload
@@ -10,7 +12,7 @@
  */
 export { AI_CONNECTIONS_PROVIDERS } from './client/types';
 export type { AiConnectAttempt, AiConnectionBeginOptions, AiConnectionsClient, AiConnectionsCredential, AiConnectionsMode, AiConnectionsProvider, AiConnectStatus, AiGatewayModel, AiProviderAuthorizationMethod, AiProviderAuthorizationMethodId, AiProviderAuthorizationMethodsSummary, AiProviderConnectionSummary, AiProviderCredentialSummary, AiProviderOffering, AiProviderSummary, AiProviderSummaryStatus, AiQuotaSnapshot, AiQuotaWindow, CreateApiKeyCredentialInput, CreatedGatewayKey, CustomProviderModel, DiscoveredProviderModel, GatewayKeyRecord, ProviderModelDiscovery, TestProviderCredentialInput, UpdateProviderCredentialInput, } from './client/types';
-export { AI_CONNECTIONS_GENERIC_ERROR_MESSAGE, AiConnectionsRequestError, normalizeAiConnectionsErrorMessage, normalizeAiConnectionsThrownError, normalizeProxyUrl, redactProxyUrl, } from './client/normalize';
+export { AiConnectionsRequestError, aiConnectionsErrorCode, normalizeProxyUrl, redactProxyUrl, } from './client/normalize';
 export { createAiConnectionsClient, resolveAiConnectionsApiBase } from './client/request';
 /**
  * Storage-shape rules for credential rows. They are shared with the Pod adapter

package/node_modules/@undefineds.co/ai-connections/dist/{ai-connections-client.js → contract/ai-connections-client.js}

@@ -1,5 +1,7 @@
 /**
- * Public entry point of the AI connections client
+ * Public entry point of the AI Connections client protocol. This package is
+ * the shared core: the gateway and the applet both consume it, and the applet
+ * (`@undefineds.co/ai-connections`) adds the components, artwork and wording.
  * (`@undefineds.co/ai-connections/client`).
  *
  * The implementation lives in `./client`, split into wire types, payload
@@ -9,7 +11,7 @@
  * parsers under `./client` are internal, and `export *` would publish them.
  */
 export { AI_CONNECTIONS_PROVIDERS } from './client/types.js';
-export { AI_CONNECTIONS_GENERIC_ERROR_MESSAGE, AiConnectionsRequestError, normalizeAiConnectionsErrorMessage, normalizeAiConnectionsThrownError, normalizeProxyUrl, redactProxyUrl, } from './client/normalize.js';
+export { AiConnectionsRequestError, aiConnectionsErrorCode, normalizeProxyUrl, redactProxyUrl, } from './client/normalize.js';
 export { createAiConnectionsClient, resolveAiConnectionsApiBase } from './client/request.js';
 /**
  * Storage-shape rules for credential rows. They are shared with the Pod adapter

package/node_modules/@undefineds.co/ai-connections/dist/{client → contract/client}/normalize.d.ts

@@ -8,7 +8,6 @@ import type { AiConnectAttempt, AiConnectionsCredential, AiConnectionsProvider,
  * within this module family. The published surface is the explicit list in
  * `ai-connections-client.ts`, not this file.
  */
-export declare const AI_CONNECTIONS_GENERIC_ERROR_MESSAGE = "AI Connection request failed. Please try again.";
 /**
  * Validate and normalize a user supplied upstream proxy URL. Proxy credentials
  * are intentionally rejected because proxy auth is not stored in the Pod
@@ -16,16 +15,27 @@ export declare const AI_CONNECTIONS_GENERIC_ERROR_MESSAGE = "AI Connection reque
  */
 export declare function normalizeProxyUrl(value: string | undefined | null): string | undefined;
 export declare function redactProxyUrl(value: string | undefined | null): string | undefined;
+/**
+ * A failed AI Connection request.
+ *
+ * It carries the facts a caller needs to decide what to say - the wire code, the
+ * upstream status, the payload itself - and a diagnostic message that names the
+ * code. The sentence a user reads is the applet's (`error-wording.ts`): a shared
+ * client must not pick the wording for whoever happens to render it.
+ */
 export declare class AiConnectionsRequestError extends Error {
     readonly code?: string;
+    readonly status: number;
     readonly providerStatus?: number;
-    constructor(message: string, payload: unknown);
+    readonly payload: unknown;
+    readonly provider?: string;
+    readonly authMode?: string;
+    constructor(payload: unknown, status: number, context?: {
+        provider?: string;
+        authMode?: string;
+    });
 }
-export declare function normalizeAiConnectionsThrownError(error: unknown): string;
-export declare function normalizeAiConnectionsErrorMessage(payload: unknown, status: number, context?: {
-    provider?: AiConnectionsProvider;
-    authMode?: 'apiKey' | 'deviceCodeOAuth' | 'local';
-}): string;
+export declare function aiConnectionsErrorCode(payload: unknown): string | undefined;
 export declare function readJson(response: Response): Promise<unknown>;
 export declare function assertProvider(provider: string): asserts provider is AiConnectionsProvider;
 export declare function parseGatewayKeyRecord(value: unknown): GatewayKeyRecord | undefined;

package/node_modules/@undefineds.co/ai-connections/dist/{client → contract/client}/normalize.js

@@ -8,7 +8,6 @@ import { AI_CONNECTIONS_PROVIDERS } from './types.js';
  * within this module family. The published surface is the explicit list in
  * `ai-connections-client.ts`, not this file.
  */
-export const AI_CONNECTIONS_GENERIC_ERROR_MESSAGE = 'AI Connection request failed. Please try again.';
 /**
  * Validate and normalize a user supplied upstream proxy URL. Proxy credentials
  * are intentionally rejected because proxy auth is not stored in the Pod
@@ -49,109 +48,29 @@ export function redactProxyUrl(value) {
     parsed.hash = '';
     return parsed.href.replace(/\/$/u, '');
 }
+/**
+ * A failed AI Connection request.
+ *
+ * It carries the facts a caller needs to decide what to say - the wire code, the
+ * upstream status, the payload itself - and a diagnostic message that names the
+ * code. The sentence a user reads is the applet's (`error-wording.ts`): a shared
+ * client must not pick the wording for whoever happens to render it.
+ */
 export class AiConnectionsRequestError extends Error {
-    constructor(message, payload) {
-        super(message);
+    constructor(payload, status, context = {}) {
+        const code = aiConnectionsErrorCode(payload);
+        super(code ? `AI Connection request failed: ${code}` : `AI Connection request failed (HTTP ${status})`);
         this.name = 'AiConnectionsRequestError';
-        this.code = errorCodeFromPayload(payload);
+        this.code = code;
+        this.status = status;
         this.providerStatus = isRecord(payload) && typeof payload.providerStatus === 'number'
             ? payload.providerStatus : undefined;
+        this.payload = payload;
+        this.provider = context.provider;
+        this.authMode = context.authMode;
     }
 }
-export function normalizeAiConnectionsThrownError(error) {
-    if (error instanceof Error) {
-        return normalizeAiConnectionsErrorText(error.message);
-    }
-    return normalizeAiConnectionsErrorText(String(error));
-}
-export function normalizeAiConnectionsErrorMessage(payload, status, context = {}) {
-    const code = errorCodeFromPayload(payload);
-    if (code === 'provider_models_response_error') {
-        const message = isRecord(payload) && typeof payload.message === 'string'
-            ? sanitizeProviderResponseMessage(payload.message)
-            : undefined;
-        if (message)
-            return message;
-        return '模型列表获取失败。请检查密钥、服务地址或网络后重试。';
-    }
-    if (code === 'provider_models_fetch_failed') {
-        const providerStatus = isRecord(payload) && typeof payload.providerStatus === 'number'
-            ? payload.providerStatus
-            : undefined;
-        const providerMessage = isRecord(payload) && typeof payload.providerMessage === 'string'
-            ? payload.providerMessage.trim()
-            : undefined;
-        return withProviderMessage(modelDiscoveryErrorMessage(providerStatus, context.authMode), providerMessage);
-    }
-    const coded = code ? messageForSafeErrorCode(code, context.provider) : undefined;
-    if (coded)
-        return coded;
-    const text = isRecord(payload) && typeof payload.error === 'string'
-        ? payload.error
-        : undefined;
-    if (text) {
-        const exact = messageForSafeErrorCode(text, context.provider);
-        if (exact)
-            return exact;
-        if (text === 'AI Connection service identity is unavailable') {
-            return text;
-        }
-        if (text === 'Provider credential not found for current identity') {
-            return '当前身份没有可用的额度凭证。';
-        }
-        if (text === 'Provider quota adapter not found' || text === 'Provider quota lookup failed') {
-            return '该接入方式不支持查询官方额度。';
-        }
-    }
-    if (status === 401)
-        return 'Please sign in again to continue.';
-    if (status === 403)
-        return 'AI Connection permission was denied.';
-    if (status === 404 && context.provider) {
-        return `${providerLabel(context.provider)} connection is not configured.`;
-    }
-    if (status === 429)
-        return 'AI Connection is rate limited. Please try again later.';
-    if (status === 503)
-        return 'AI Connection service is unavailable.';
-    return AI_CONNECTIONS_GENERIC_ERROR_MESSAGE;
-}
-const LOCAL_SESSION_REFRESH_FAILED_MESSAGE = '订阅登录态自动刷新失败，请稍后重试。';
-const LOCAL_SESSION_REAUTH_REQUIRED_MESSAGE = '订阅登录态已失效，请在原客户端重新登录后重读，或使用设备码登录。';
-const OAUTH_MODEL_AUTH_FAILED_MESSAGE = '订阅登录态不可用，请重读登录态或重新登录后再同步模型。';
-const MODEL_DISCOVERY_SAFE_MESSAGES = new Set([
-    OAUTH_MODEL_AUTH_FAILED_MESSAGE,
-    LOCAL_SESSION_REFRESH_FAILED_MESSAGE,
-    LOCAL_SESSION_REAUTH_REQUIRED_MESSAGE,
-    '密钥不可用。请检查密钥是否填写正确，或换一个密钥后重试。',
-    '模型服务地址不正确。请检查服务地址后重试。',
-    '请求太频繁。请稍等一会儿再试。',
-    '模型服务暂时没有响应。请稍后重试。',
-    '模型列表获取失败。请检查密钥、服务地址或网络后重试。',
-]);
-function normalizeAiConnectionsErrorText(message) {
-    if (message.startsWith('provider_models_response_error:')) {
-        return sanitizeProviderResponseMessage(message.slice('provider_models_response_error:'.length))
-            ?? '模型列表获取失败。请检查密钥、服务地址或网络后重试。';
-    }
-    const exact = messageForSafeErrorCode(message);
-    if (exact)
-        return exact;
-    const prefix = message.split(':', 1)[0]?.trim();
-    const prefixed = prefix ? messageForSafeErrorCode(prefix) : undefined;
-    if (prefixed)
-        return prefixed;
-    if (message === 'AI Connection service identity is unavailable')
-        return message;
-    if (MODEL_DISCOVERY_SAFE_MESSAGES.has(message))
-        return message;
-    if (isModelDiscoveryMessageWithProviderDetail(message))
-        return message;
-    if (message.startsWith('invalid_'))
-        return 'AI Connection returned an invalid response.';
-    return AI_CONNECTIONS_GENERIC_ERROR_MESSAGE;
-}
-function errorCodeFromPayload(payload) {
+export function aiConnectionsErrorCode(payload) {
     if (!isRecord(payload))
         return undefined;
     if (typeof payload.code === 'string')
@@ -163,107 +82,6 @@ function errorCodeFromPayload(payload) {
     }
     return undefined;
 }
-function messageForSafeErrorCode(code, provider) {
-    switch (code.trim().toLowerCase().replace(/-/g, '_')) {
-        case 'not_configured':
-        case 'notconfigured':
-            return provider
-                ? `${providerLabel(provider)} connection is not configured.`
-                : 'AI provider connection is not configured.';
-        case 'unsupported':
-            return provider
-                ? `${providerLabel(provider)} does not support this operation.`
-                : 'This AI Connection operation is not supported.';
-        case 'service_identity_unavailable':
-            return 'AI Connection service identity is unavailable';
-        case 'unauthorized':
-            return 'Please sign in again to continue.';
-        case 'forbidden':
-        case 'permission_denied':
-            return 'AI Connection permission was denied.';
-        case 'rate_limited':
-            return 'AI Connection is rate limited. Please try again later.';
-        case 'service_unavailable':
-            return 'AI Connection service is unavailable.';
-        case 'unsafe_provider_base_url':
-            return '该服务地址指向 Xpod 不允许访问的网络，请改用公网 HTTPS 地址。';
-        case 'invalid_proxy_url':
-            return '代理地址必须是无账号密码的 HTTP 或 HTTPS 地址。';
-        case 'oauth_refresh_failed':
-        case 'oauth_refresh_unavailable':
-        case 'local_session_refresh_failed':
-            return LOCAL_SESSION_REFRESH_FAILED_MESSAGE;
-        case 'oauth_session_reauth_required':
-        case 'oauth_refresh_token_required':
-        case 'local_session_reauth_required':
-        case 'local_session_missing_refresh_token':
-            return LOCAL_SESSION_REAUTH_REQUIRED_MESSAGE;
-        case 'models_persistence_failed':
-            return '模型已获取，但保存到 Pod 失败。请重试同步模型。';
-        case 'quota_credential_not_found':
-            return '当前身份没有可用的额度凭证。';
-        case 'credential_secret_unavailable':
-            return '当前凭证密钥不可用，请重新保存后再查询额度。';
-        case 'gateway_api_key_plaintext_unavailable':
-            return 'Pod 中未找到此 API Key 的原文，无法复制配置。请创建新的 Key，更新客户端后再删除旧 Key。';
-        case 'quota_adapter_not_found':
-            return '该接入方式不支持查询官方额度。';
-        default:
-            return undefined;
-    }
-}
-function modelDiscoveryErrorMessage(providerStatus, authMode) {
-    if (providerStatus === 401 || providerStatus === 403) {
-        if (authMode === 'deviceCodeOAuth')
-            return OAUTH_MODEL_AUTH_FAILED_MESSAGE;
-        return '密钥不可用。请检查密钥是否填写正确，或换一个密钥后重试。';
-    }
-    if (providerStatus === 404) {
-        return '模型服务地址不正确。请检查服务地址后重试。';
-    }
-    if (providerStatus === 429) {
-        return '请求太频繁。请稍等一会儿再试。';
-    }
-    if (providerStatus !== undefined && providerStatus >= 500) {
-        return '模型服务暂时没有响应。请稍后重试。';
-    }
-    return '模型列表获取失败。请检查密钥、服务地址或网络后重试。';
-}
-function withProviderMessage(message, providerMessage) {
-    const sanitized = providerMessage ? sanitizeProviderResponseMessage(providerMessage) : undefined;
-    if (!sanitized)
-        return message;
-    return `${message} 上游返回：${sanitized}`;
-}
-function isModelDiscoveryMessageWithProviderDetail(message) {
-    const marker = ' 上游返回：';
-    const index = message.indexOf(marker);
-    if (index <= 0)
-        return false;
-    return MODEL_DISCOVERY_SAFE_MESSAGES.has(message.slice(0, index));
-}
-function sanitizeProviderResponseMessage(value) {
-    const sanitized = value
-        .replace(/[\u0000-\u001f\u007f]/gu, ' ')
-        .replace(/\bBearer\s+[^\s,;]+/giu, 'Bearer [REDACTED]')
-        .replace(/(?:sk|id)[._-][A-Za-z0-9._-]{8,}/gu, '[REDACTED]')
-        .replace(/https?:\/\/[^\s]+/giu, '[URL]')
-        .trim()
-        .slice(0, 240);
-    return sanitized || undefined;
-}
-function providerLabel(provider) {
-    switch (provider) {
-        case 'openai': return 'OpenAI';
-        case 'anthropic': return 'Anthropic';
-        case 'kimi': return 'Kimi';
-        case 'bailian': return 'Bailian';
-        case 'deepseek': return 'DeepSeek';
-        case 'zhipu': return 'Zhipu';
-        case 'ollama': return 'Ollama';
-        case 'custom': return 'Custom';
-    }
-}
 export async function readJson(response) {
     const text = await response.text();
     if (!text)
@@ -535,7 +353,7 @@ function parseAuthorizationMethod(value) {
         id: value.id,
         authMode,
         connectMode,
-        label: stringValue(value.label) ?? authorizationMethodFallbackLabel(value.id, authMode),
+        label: stringValue(value.label),
         lifecycle,
         reason: stringValue(value.reason),
     });
@@ -543,19 +361,6 @@ function parseAuthorizationMethod(value) {
 function authorizationMethodLifecycleValue(value) {
     return value === 'active' || value === 'unavailable' ? value : undefined;
 }
-function authorizationMethodFallbackLabel(id, authMode) {
-    if (id === 'device-code')
-        return '设备码登录';
-    if (id === 'local-session-import')
-        return '已有登录态';
-    if (id === 'local-service')
-        return '本地服务';
-    if (id === 'api-key' || authMode === 'apiKey')
-        return 'API Key';
-    if (authMode === 'local')
-        return '本地服务';
-    return '浏览器登录';
-}
 function offeringLifecycleValue(value) {
     return value === 'active' || value === 'legacy' || value === 'unavailable'
         ? value

package/node_modules/@undefineds.co/ai-connections/dist/{client → contract/client}/request.js

@@ -1,4 +1,4 @@
-import { AiConnectionsRequestError, assertProvider, compactObject, isDefined, isRecord, normalizeAiConnectionsErrorMessage, parseAuthorizationMethodsSummary, parseConnectAttempt, parseCredential, parseCustomModelList, parseGatewayKeyRecord, parseGatewayModel, parseModelDiscovery, parseProviderCredentialSummary, parseProviderSummaries, readJson, sanitizePublicObject, } from './normalize.js';
+import { AiConnectionsRequestError, assertProvider, compactObject, isDefined, isRecord, parseAuthorizationMethodsSummary, parseConnectAttempt, parseCredential, parseCustomModelList, parseGatewayKeyRecord, parseGatewayModel, parseModelDiscovery, parseProviderCredentialSummary, parseProviderSummaries, readJson, sanitizePublicObject, } from './normalize.js';
 /**
  * The HTTP client itself: one factory over the Pod base URL and an authenticated
  * fetch, with every response normalised by `normalize.ts`.
@@ -25,7 +25,7 @@ export function createAiConnectionsClient({ webId, podBaseUrl, authenticatedFetc
         });
         const payload = await readJson(response);
         if (!response.ok) {
-            throw new AiConnectionsRequestError(normalizeAiConnectionsErrorMessage(payload, response.status, context), payload);
+            throw new AiConnectionsRequestError(payload, response.status, context);
         }
         return payload;
     };
@@ -64,7 +64,7 @@ export function createAiConnectionsClient({ webId, podBaseUrl, authenticatedFetc
                 return [];
             const payload = await readJson(response);
             if (!response.ok) {
-                throw new Error(normalizeAiConnectionsErrorMessage(payload, response.status));
+                throw new AiConnectionsRequestError(payload, response.status);
             }
             return isRecord(payload) && Array.isArray(payload.data)
                 ? payload.data.map(parseAuthorizationMethodsSummary).filter(isDefined)

package/node_modules/@undefineds.co/ai-connections/dist/{client → contract/client}/types.d.ts

@@ -137,12 +137,21 @@ export interface ProviderModelDiscovery {
 }
 export type AiProviderAuthorizationMethodId = 'device-code' | 'local-session-import' | 'api-key' | 'local-service'
 /** Opens the provider console to sign in and mint the key the entry then stores. */
- | 'browser-login' | string;
+ | 'browser-login'
+/** Starts an authorization-code browser sign-in and waits for the local callback. */
+ | 'browser-oauth' | string;
 export interface AiProviderAuthorizationMethod {
     id: AiProviderAuthorizationMethodId;
     authMode: 'oauth' | 'deviceCode' | 'local' | 'apiKey';
     connectMode?: AiConnectionsMode;
-    label: string;
+    /**
+     * The wording the entry is shown under. Optional on purpose: the shared core
+     * names the action by `id` and the applet supplies the wording, so a payload
+     * carrying none is still a complete contract. A provider the user configured
+     * may declare its own wording here, which is what keeps a custom entry from
+     * rendering under a built-in name.
+     */
+    label?: string;
     lifecycle: 'active' | 'unavailable';
     reason?: string;
 }