@undefineds.co/xpod 0.4.20 → 0.4.25

package/node_modules/@undefineds.co/ai-connections/dist/collection-runtime.d.ts

@@ -1,6 +1,6 @@
 import type { AiConnectionsPodStore, WebExtensionHost } from '@undefineds.co/extension-sdk/web';
-import type { AiConnectionsClient } from './contract/ai-connections-client';
-import { type CredentialCollection } from './collections';
+import type { AiConnectionsClient } from './contract/ai-connections-client.js';
+import { type CredentialCollection } from './collections.js';
 /**
  * The half of the credentials table that needs the collection layer at runtime.
  *

package/node_modules/@undefineds.co/ai-connections/dist/collections.d.ts

@@ -1,6 +1,6 @@
 import { credentialDescriptor } from '@undefineds.co/models';
 import type { PodCollection, RowOf } from '@undefineds.co/pod-collections';
-import type { AiConnectionsProvider, AiProviderCredentialSummary, AiProviderSummary } from './contract/ai-connections-client';
+import type { AiConnectionsProvider, AiProviderCredentialSummary, AiProviderSummary } from './contract/ai-connections-client.js';
 /**
  * The credentials table, declared once (`docs/pod-collections.md` §6.4-2).
  *
@@ -64,7 +64,7 @@ export interface CredentialRowsSource {
  */
 export declare function useCredentialRows(source: CredentialRowsSource): readonly CredentialRow[] | undefined;
 /** The lazy half of this module's subject: everything that needs the engine. */
-export type CredentialCollectionRuntime = typeof import('./collection-runtime');
+export type CredentialCollectionRuntime = typeof import('./collection-runtime.js');
 /**
  * The collection layer at the point of use, fetched once.
  *

package/node_modules/@undefineds.co/ai-connections/dist/collections.js

@@ -97,7 +97,7 @@ export function credentialSummaryFromRow(row, provider, carrier) {
     // release can still carry the literal as a string, so keep tolerating both.
     const reauthRequired = row.reauthRequired === true || String(row.reauthRequired) === 'true';
     return {
-        id: String(row.id),
+        id: credentialIdOfRow(row),
         provider,
         offeringId: carrier?.offeringId ?? defaultOfferingFor(provider, authMode),
         authMode,
@@ -120,7 +120,7 @@ export function credentialSummariesForProvider(provider, rows, carrier = []) {
     for (const row of rows) {
         if (providerOfCredentialRow(row) !== provider)
             continue;
-        summaries.push(credentialSummaryFromRow(row, provider, byId.get(String(row.id))));
+        summaries.push(credentialSummaryFromRow(row, provider, byId.get(credentialIdOfRow(row))));
     }
     return summaries;
 }

package/node_modules/@undefineds.co/ai-connections/dist/contract/ai-connections-client.d.ts

@@ -10,14 +10,14 @@
  * lists the surface explicitly rather than re-exporting whole modules: the
  * parsers under `./client` are internal, and `export *` would publish them.
  */
-export { AI_CONNECTIONS_PROVIDERS } from './client/types';
-export type { AiConnectAttempt, AiConnectionBeginOptions, AiConnectionsClient, AiConnectionsCredential, AiConnectionsMode, AiConnectionsProvider, AiConnectStatus, AiGatewayModel, AiProviderAuthorizationMethod, AiProviderAuthorizationMethodId, AiProviderAuthorizationMethodsSummary, AiProviderConnectionSummary, AiProviderCredentialSummary, AiProviderOffering, AiProviderSummary, AiProviderSummaryStatus, AiQuotaSnapshot, AiQuotaWindow, CreateApiKeyCredentialInput, CreatedGatewayKey, CustomProviderModel, DiscoveredProviderModel, GatewayKeyRecord, ProviderModelDiscovery, TestProviderCredentialInput, UpdateProviderCredentialInput, } from './client/types';
-export { AiConnectionsRequestError, aiConnectionsErrorCode, normalizeProxyUrl, redactProxyUrl, } from './client/normalize';
-export { createAiConnectionsClient, resolveAiConnectionsApiBase } from './client/request';
+export { AI_CONNECTIONS_PROVIDERS } from './client/types.js';
+export type { AiConnectAttempt, AiConnectionBeginOptions, AiConnectionsClient, AiConnectionsCredential, AiConnectionsMode, AiConnectionsProvider, AiConnectStatus, AiGatewayModel, AiProviderAuthorizationMethod, AiProviderAuthorizationMethodId, AiProviderAuthorizationMethodsSummary, AiProviderConnectionSummary, AiProviderCredentialSummary, AiProviderOffering, AiProviderSummary, AiProviderSummaryStatus, AiQuotaSnapshot, AiQuotaWindow, CreateApiKeyCredentialInput, CreatedGatewayKey, CustomProviderModel, DiscoveredProviderModel, GatewayKeyRecord, ProviderModelDiscovery, TestProviderCredentialInput, UpdateProviderCredentialInput, } from './client/types.js';
+export { AiConnectionsRequestError, aiConnectionsErrorCode, normalizeProxyUrl, redactProxyUrl, } from './client/normalize.js';
+export { createAiConnectionsClient, resolveAiConnectionsApiBase } from './client/request.js';
 /**
  * Storage-shape rules for credential rows. They are shared with the Pod adapter
  * (`ui/src/extensions/XpodAiConnectionsPodStore.ts`) and with the collection
  * layer that writes the same rows: one envelope format, one provider relation.
  */
-export { credentialProviderRelation, credentialRowKeyFor, credentialSecretEnvelope, customCredentialProviderRelation, decodeCredentialSecret, providerOfCredentialKey, providerResourceKey, providerResourceReference, } from './credential-storage';
-export type { CredentialSecretEnvelopeInput, CredentialSecretReadInput, } from './credential-storage';
+export { credentialProviderRelation, credentialRowKeyFor, credentialSecretEnvelope, customCredentialProviderRelation, decodeCredentialSecret, providerOfCredentialKey, providerResourceKey, providerResourceReference, } from './credential-storage.js';
+export type { CredentialSecretEnvelopeInput, CredentialSecretReadInput, } from './credential-storage.js';

package/node_modules/@undefineds.co/ai-connections/dist/contract/client/normalize.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectAttempt, AiConnectionsCredential, AiConnectionsProvider, AiGatewayModel, AiProviderAuthorizationMethodsSummary, AiProviderCredentialSummary, AiProviderSummary, CustomProviderModel, GatewayKeyRecord, ProviderModelDiscovery } from './types';
+import type { AiConnectAttempt, AiConnectionsCredential, AiConnectionsProvider, AiGatewayModel, AiProviderAuthorizationMethodsSummary, AiProviderCredentialSummary, AiProviderSummary, CustomProviderModel, GatewayKeyRecord, ProviderModelDiscovery } from './types.js';
 /**
  * Everything that turns untrusted API payloads, user input and failures into the
  * shapes the rest of the app can rely on: proxy/pod URL normalising, error text,

package/node_modules/@undefineds.co/ai-connections/dist/contract/client/normalize.js

@@ -1,3 +1,5 @@
+import { PROVIDER_LABELS } from '../provider-catalog.js';
+import { AI_MODEL_CLASS } from '@undefineds.co/models';
 import { AI_CONNECTIONS_PROVIDERS } from './types.js';
 /**
  * Everything that turns untrusted API payloads, user input and failures into the
@@ -173,7 +175,9 @@ export function parseGatewayModel(value) {
         offeringId: stringValue(value.offeringId),
         resourceId: stringValue(value.resourceId),
         displayName: stringValue(value.displayName) ?? stringValue(value.display_name) ?? stringValue(value.name),
+        modelType: typeof value.modelType === 'string' && Object.prototype.hasOwnProperty.call(AI_MODEL_CLASS, value.modelType) ? value.modelType : undefined,
         contextWindow: numberValue(value.contextWindow) ?? numberValue(value.context_window),
+        dimension: typeof value.dimension === 'number' && Number.isInteger(value.dimension) && value.dimension > 0 ? value.dimension : undefined,
         protocols: Array.isArray(value.protocols)
             ? value.protocols.filter((protocol) => typeof protocol === 'string')
             : undefined,
@@ -418,6 +422,10 @@ export function parseProviderCredentialSummary(value) {
         baseUrl: stringValue(value.baseUrl),
         proxyUrl: stringValue(value.proxyUrl),
         expiresAt: stringValue(value.expiresAt),
+        lastFailureCode: stringValue(value.lastFailureCode),
+        lastFailureAt: stringValue(value.lastFailureAt),
+        rateLimitResetAt: stringValue(value.rateLimitResetAt),
+        failCount: numberValue(value.failCount),
         version: value.version,
     });
 }
@@ -552,16 +560,7 @@ function uniqueBy(values, keyFor) {
     return result;
 }
 function providerDisplayName(provider) {
-    switch (provider) {
-        case 'openai': return 'OpenAI';
-        case 'anthropic': return 'Anthropic';
-        case 'kimi': return 'Kimi';
-        case 'bailian': return 'Alibaba Bailian';
-        case 'deepseek': return 'DeepSeek';
-        case 'zhipu': return 'Zhipu';
-        case 'ollama': return 'Ollama';
-        case 'custom': return 'Custom';
-    }
+    return PROVIDER_LABELS[provider];
 }
 export function parseCredential(value) {
     if (!isRecord(value)

package/node_modules/@undefineds.co/ai-connections/dist/contract/client/request.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectionsClient, CreateAiConnectionsClientInput } from './types';
+import type { AiConnectionsClient, CreateAiConnectionsClientInput } from './types.js';
 /**
  * The HTTP client itself: one factory over the Pod base URL and an authenticated
  * fetch, with every response normalised by `normalize.ts`.

package/node_modules/@undefineds.co/ai-connections/dist/contract/client/types.d.ts

@@ -1,3 +1,4 @@
+import type { AIModelClass } from '@undefineds.co/models';
 /**
  * Wire and view types of the AI connections API. No behaviour.
  */
@@ -91,12 +92,14 @@ export interface AiGatewayModel extends AiConnectionsModelSelection {
      * Rows read from the Pod carry it as their own column; the settings list shows
      * it as the same capability mark the Gateway projection uses.
      */
-    modelType?: DiscoveredProviderModelType;
+    modelType?: AIModelClass;
     /** Owning credential for providers that allow multiple independent custom endpoints. */
     credentialId?: string;
     displayName?: string;
     availability?: 'available' | 'unavailable';
     contextWindow?: number;
+    /** Canonical embeddingModelResource.dimension, when supplied by the catalog. */
+    dimension?: number;
     protocols?: string[];
     custom?: boolean;
     inputModalities?: string[];
@@ -209,6 +212,10 @@ export interface AiProviderCredentialSummary {
     /** Proxy endpoint with credentials removed; the secret value never leaves the Pod. */
     proxyUrl?: string;
     compatibility?: 'auto' | 'openai' | 'anthropic';
+    lastFailureCode?: string;
+    lastFailureAt?: string;
+    rateLimitResetAt?: string;
+    failCount?: number;
     expiresAt?: string;
     version: number;
 }

package/node_modules/@undefineds.co/ai-connections/dist/contract/client-config/base-adapter.d.ts

@@ -1,5 +1,5 @@
-import { AiClientConfigTransaction } from './transaction';
-import type { AiClientConfigAdapter, AiClientConfigPlan, AiConnectionsClientProfile, ClientDetection, ClientInspection, ClientVerification } from './types';
+import { AiClientConfigTransaction } from './transaction.js';
+import type { AiClientConfigAdapter, AiClientConfigPlan, AiConnectionsClientProfile, ClientDetection, ClientInspection, ClientVerification } from './types.js';
 /** Stable, machine-readable errors shared by all coding-client adapters. */
 export declare class AiClientConfigError extends Error {
     readonly code: 'model_catalog_empty' | 'model_catalog_invalid' | 'model_not_available';
@@ -20,7 +20,7 @@ interface OwnershipState {
 export declare function hashWebId(webId: string): string;
 declare function contentHash(value: string): string;
 export declare const contentFingerprint: typeof contentHash;
-export { normalizeMessagesEndpoint, normalizeV1Endpoint } from '../endpoint-urls';
+export { normalizeMessagesEndpoint, normalizeV1Endpoint } from '../endpoint-urls.js';
 export declare function parseJsonObject(content: string | undefined, label: string): Record<string, unknown>;
 export declare function stringifyJson(value: unknown): string;
 export declare function looksLikePreviousXpodValue(value: unknown): boolean;

package/node_modules/@undefineds.co/ai-connections/dist/contract/client-config/codex.d.ts

@@ -1,5 +1,5 @@
-import { BaseAiClientConfigAdapter } from './base-adapter';
-import type { AiClientConfigPlan, AiConnectionsClientProfile, ClientInspection, ClientVerification } from './types';
+import { BaseAiClientConfigAdapter } from './base-adapter.js';
+import type { AiClientConfigPlan, AiConnectionsClientProfile, ClientInspection, ClientVerification } from './types.js';
 export interface CodexConfigAdapterOptions {
     homeDir?: string;
 }

package/node_modules/@undefineds.co/ai-connections/dist/contract/client-config/index.cjs

@@ -18,13 +18,15 @@ var __toESM = (mod, isNodeMode, target) => {
       return cached;
   }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
-  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
-      __defProp(to, key, {
-        get: __accessProp.bind(mod, key),
-        enumerable: true
-      });
+  const to = isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
+  if (mod && typeof mod === "object" || typeof mod === "function") {
+    for (let key of __getOwnPropNames(mod))
+      if (!__hasOwnProp.call(to, key))
+        __defProp(to, key, {
+          get: __accessProp.bind(mod, key),
+          enumerable: true
+        });
+  }
   if (canCache)
     cache.set(mod, to);
   return to;
@@ -63,37 +65,37 @@ var __export = (target, all) => {
 // src/contract/client-config/index.ts
 var exports_client_config = {};
 __export(exports_client_config, {
-  stripLegacyXpodObject: () => stripLegacyXpodObject,
-  stringifyJson: () => stringifyJson,
-  resolveActiveModel: () => resolveActiveModel,
-  profileApiKey: () => profileApiKey,
-  parseJsonObject: () => parseJsonObject,
-  normalizeV1Endpoint: () => normalizeV1Endpoint,
-  normalizeMessagesEndpoint: () => normalizeMessagesEndpoint,
-  normalizeClientProfile: () => normalizeClientProfile,
-  looksLikePreviousXpodValue: () => looksLikePreviousXpodValue,
-  hashWebId: () => hashWebId,
-  contentFingerprint: () => contentFingerprint,
-  activeModelReferences: () => activeModelReferences,
-  PiConfigAdapter: () => PiConfigAdapter,
-  CodexConfigAdapter: () => CodexConfigAdapter,
-  CodeBuddyConfigAdapter: () => CodeBuddyConfigAdapter,
-  ClaudeCodeConfigAdapter: () => ClaudeCodeConfigAdapter,
-  BaseAiClientConfigAdapter: () => BaseAiClientConfigAdapter,
+  AiClientConfigError: () => AiClientConfigError,
   AiClientConfigTransaction: () => AiClientConfigTransaction,
-  AiClientConfigError: () => AiClientConfigError
+  BaseAiClientConfigAdapter: () => BaseAiClientConfigAdapter,
+  ClaudeCodeConfigAdapter: () => ClaudeCodeConfigAdapter,
+  CodeBuddyConfigAdapter: () => CodeBuddyConfigAdapter,
+  CodexConfigAdapter: () => CodexConfigAdapter,
+  PiConfigAdapter: () => PiConfigAdapter,
+  activeModelReferences: () => activeModelReferences,
+  contentFingerprint: () => contentFingerprint,
+  hashWebId: () => hashWebId,
+  looksLikePreviousXpodValue: () => looksLikePreviousXpodValue,
+  normalizeClientProfile: () => normalizeClientProfile,
+  normalizeMessagesEndpoint: () => normalizeMessagesEndpoint,
+  normalizeV1Endpoint: () => normalizeV1Endpoint,
+  parseJsonObject: () => parseJsonObject,
+  profileApiKey: () => profileApiKey,
+  resolveActiveModel: () => resolveActiveModel,
+  stringifyJson: () => stringifyJson,
+  stripLegacyXpodObject: () => stripLegacyXpodObject
 });
 module.exports = __toCommonJS(exports_client_config);
 
 // src/contract/client-config/base-adapter.ts
-var crypto2 = __toESM(require("node:crypto"));
-var fs2 = __toESM(require("node:fs"));
-var path2 = __toESM(require("node:path"));
+var crypto2 = __toESM(require("node:crypto"), 1);
+var fs2 = __toESM(require("node:fs"), 1);
+var path2 = __toESM(require("node:path"), 1);
 
 // src/contract/client-config/transaction.ts
-var crypto = __toESM(require("node:crypto"));
-var fs = __toESM(require("node:fs"));
-var path = __toESM(require("node:path"));
+var crypto = __toESM(require("node:crypto"), 1);
+var fs = __toESM(require("node:fs"), 1);
+var path = __toESM(require("node:path"), 1);
 
 class AiClientConfigTransaction {
   rename;
@@ -588,9 +590,9 @@ class BaseAiClientConfigAdapter {
   }
 }
 // src/contract/client-config/codex.ts
-var fs3 = __toESM(require("node:fs"));
-var os = __toESM(require("node:os"));
-var path3 = __toESM(require("node:path"));
+var fs3 = __toESM(require("node:fs"), 1);
+var os = __toESM(require("node:os"), 1);
+var path3 = __toESM(require("node:path"), 1);
 var START = "# >>> xpod-ai-connections managed";
 var END = "# <<< xpod-ai-connections managed";
 
@@ -999,9 +1001,9 @@ function readCatalogModels(content, label) {
   return catalog.models;
 }
 // src/contract/client-config/json-env-adapter.ts
-var fs4 = __toESM(require("node:fs"));
-var os2 = __toESM(require("node:os"));
-var path4 = __toESM(require("node:path"));
+var fs4 = __toESM(require("node:fs"), 1);
+var os2 = __toESM(require("node:os"), 1);
+var path4 = __toESM(require("node:path"), 1);
 class JsonEnvAdapter extends BaseAiClientConfigAdapter {
   envProjection;
   settingsPath;
@@ -1091,9 +1093,9 @@ class CodeBuddyConfigAdapter extends JsonEnvAdapter {
   }
 }
 // src/contract/client-config/pi.ts
-var fs5 = __toESM(require("node:fs"));
-var os3 = __toESM(require("node:os"));
-var path5 = __toESM(require("node:path"));
+var fs5 = __toESM(require("node:fs"), 1);
+var os3 = __toESM(require("node:os"), 1);
+var path5 = __toESM(require("node:path"), 1);
 class PiConfigAdapter extends BaseAiClientConfigAdapter {
   settingsPath;
   modelsPath;

package/node_modules/@undefineds.co/ai-connections/dist/contract/client-config/index.d.ts

@@ -1,6 +1,6 @@
-export * from './base-adapter';
-export * from './codex';
-export * from './json-env-adapter';
-export * from './pi';
-export * from './transaction';
-export * from './types';
+export * from './base-adapter.js';
+export * from './codex.js';
+export * from './json-env-adapter.js';
+export * from './pi.js';
+export * from './transaction.js';
+export * from './types.js';

package/node_modules/@undefineds.co/ai-connections/dist/contract/client-config/json-env-adapter.d.ts

@@ -1,5 +1,5 @@
-import { BaseAiClientConfigAdapter } from './base-adapter';
-import type { AiConnectionsClientProfile, ClientVerification } from './types';
+import { BaseAiClientConfigAdapter } from './base-adapter.js';
+import type { AiConnectionsClientProfile, ClientVerification } from './types.js';
 type EnvProjection = (profile: AiConnectionsClientProfile) => Record<string, string>;
 declare abstract class JsonEnvAdapter extends BaseAiClientConfigAdapter {
     private readonly envProjection;

package/node_modules/@undefineds.co/ai-connections/dist/contract/client-config/pi.d.ts

@@ -1,5 +1,5 @@
-import { BaseAiClientConfigAdapter } from './base-adapter';
-import type { AiConnectionsClientProfile, ClientVerification } from './types';
+import { BaseAiClientConfigAdapter } from './base-adapter.js';
+import type { AiConnectionsClientProfile, ClientVerification } from './types.js';
 export interface PiConfigAdapterOptions {
     homeDir?: string;
 }

package/node_modules/@undefineds.co/ai-connections/dist/contract/client-config/transaction.d.ts

@@ -1,4 +1,4 @@
-import type { ConfigWrite } from './types';
+import type { ConfigWrite } from './types.js';
 export interface AiClientConfigTransactionDependencies {
     rename?: (from: string, to: string) => Promise<void>;
 }

package/node_modules/@undefineds.co/ai-connections/dist/contract/index.d.ts

@@ -6,4 +6,4 @@
  * client-configuration adapters stay on their own subpaths because they are
  * larger and only some consumers need them.
  */
-export * from './ai-connections-client';
+export * from './ai-connections-client.js';

package/node_modules/@undefineds.co/ai-connections/dist/contract/provider-catalog.cjs

@@ -39,18 +39,19 @@ var __export = (target, all) => {
 // src/contract/provider-catalog.ts
 var exports_provider_catalog = {};
 __export(exports_provider_catalog, {
-  storedOfferingIdFor: () => storedOfferingIdFor,
-  providerOfferings: () => providerOfferings,
-  offeringBaseUrl: () => offeringBaseUrl,
-  defaultOfferingFor: () => defaultOfferingFor,
-  customCompatibilityValue: () => customCompatibilityValue,
-  credentialOfferingMetadata: () => credentialOfferingMetadata,
-  PROVIDER_OFFERINGS: () => PROVIDER_OFFERINGS,
-  DEFAULT_PROVIDER_OFFERINGS: () => DEFAULT_PROVIDER_OFFERINGS,
-  CUSTOM_DEFAULT_OFFERINGS: () => CUSTOM_DEFAULT_OFFERINGS,
-  BROWSER_LOGIN_METHOD: () => BROWSER_LOGIN_METHOD,
+  AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS: () => AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS,
   API_KEY_METHOD: () => API_KEY_METHOD,
-  AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS: () => AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS
+  BROWSER_LOGIN_METHOD: () => BROWSER_LOGIN_METHOD,
+  CUSTOM_DEFAULT_OFFERINGS: () => CUSTOM_DEFAULT_OFFERINGS,
+  DEFAULT_PROVIDER_OFFERINGS: () => DEFAULT_PROVIDER_OFFERINGS,
+  PROVIDER_LABELS: () => PROVIDER_LABELS,
+  PROVIDER_OFFERINGS: () => PROVIDER_OFFERINGS,
+  credentialOfferingMetadata: () => credentialOfferingMetadata,
+  customCompatibilityValue: () => customCompatibilityValue,
+  defaultOfferingFor: () => defaultOfferingFor,
+  offeringBaseUrl: () => offeringBaseUrl,
+  providerOfferings: () => providerOfferings,
+  storedOfferingIdFor: () => storedOfferingIdFor
 });
 module.exports = __toCommonJS(exports_provider_catalog);
 
@@ -67,6 +68,16 @@ var AI_CONNECTIONS_PROVIDERS = [
 ];
 
 // src/contract/provider-catalog.ts
+var PROVIDER_LABELS = {
+  openai: "OpenAI",
+  anthropic: "Anthropic",
+  kimi: "Kimi",
+  bailian: "百炼",
+  deepseek: "DeepSeek",
+  zhipu: "智谱 AI",
+  ollama: "Ollama",
+  custom: "Custom"
+};
 var DEFAULT_PROVIDER_OFFERINGS = [
   { id: "api-platform", label: "API Platform", kind: "api-platform", lifecycle: "active", authModes: ["apiKey"] }
 ];
@@ -111,6 +122,7 @@ var CUSTOM_DEFAULT_OFFERINGS = [
   }
 ];
 var KIMI_SUBSCRIPTION_URL = "https://www.kimi.com/code";
+var KIMI_SUBSCRIPTION_CONSOLE_URL = "https://www.kimi.com/code/console";
 var KIMI_USAGE_POLICY_URL = "https://www.kimi.com/user/agreement";
 var KIMI_CODING_BASE_URL = "https://api.kimi.com/coding/v1";
 var KIMI_ANTHROPIC_BASE_URL = "https://api.kimi.com/coding/";
@@ -168,15 +180,16 @@ var PROVIDER_OFFERINGS = {
   anthropic: [
     {
       id: "official-subscription",
-      label: "Claude Code Subscription",
+      label: "Claude Pro / Max",
       kind: "oauth-subscription",
       lifecycle: "unavailable",
       authModes: ["oauth"],
-      productLabel: "Anthropic",
+      authorizationMethods: [],
+      productLabel: "Claude Code",
       runtimeProviderIds: ["anthropic"],
       credentialPrefixHints: [],
       consoleUrl: "https://claude.ai/",
-      subscriptionUrl: "https://claude.ai/settings/billing",
+      subscriptionUrl: "https://claude.com/pricing",
       endpoints: [],
       modelDiscovery: { strategy: "unsupported", path: "/models", endpointProtocol: "anthropic" },
       quota: { strategy: "subscription", url: "https://claude.ai/settings/usage" },
@@ -215,7 +228,7 @@ var PROVIDER_OFFERINGS = {
       anthropicBaseUrl: KIMI_ANTHROPIC_BASE_URL,
       quotaStrategy: "subscription",
       quotaUrl: KIMI_SUBSCRIPTION_URL,
-      consoleUrl: KIMI_SUBSCRIPTION_URL,
+      consoleUrl: KIMI_SUBSCRIPTION_CONSOLE_URL,
       subscriptionUrl: KIMI_SUBSCRIPTION_URL,
       usagePolicyUrl: KIMI_USAGE_POLICY_URL,
       supportsDeveloperMessages: false

package/node_modules/@undefineds.co/ai-connections/dist/contract/provider-catalog.d.ts

@@ -1,4 +1,5 @@
-import type { AiConnectionsProvider, AiProviderAuthorizationMethod, AiProviderCredentialSummary, AiProviderOffering } from './ai-connections-client';
+import type { AiConnectionsProvider, AiProviderAuthorizationMethod, AiProviderCredentialSummary, AiProviderOffering } from './ai-connections-client.js';
+export declare const PROVIDER_LABELS: Record<AiConnectionsProvider, string>;
 export declare const DEFAULT_PROVIDER_OFFERINGS: AiProviderOffering[];
 /**
  * How an offering accepts a key: typed into Xpod's own form (this entry) or
@@ -16,9 +17,8 @@ export declare const API_KEY_METHOD: AiProviderAuthorizationMethod;
  * truth, `apiKey`) instead of on a provider-level label, and it points at the
  * `consoleUrl` the offering already carries.
  *
- * Providers without one say something real by not declaring it: DeepSeek has no
- * account console to sign into, Ollama is a local service, and `custom` is
- * configured inside Xpod rather than at a provider.
+ * Providers without this action use the API Key form directly or a local
+ * service. Opening a console does not perform OAuth or connect an account.
  *
  * The id names the action the way its siblings do (browser-login / device-code /
  * local-session-import); the wording follows from the id in the applet, and the

package/node_modules/@undefineds.co/ai-connections/dist/contract/provider-catalog.js

@@ -2,6 +2,16 @@ import { AI_CONNECTIONS_PROVIDERS } from './client/types.js';
 // Built-in provider and offering catalog. This is the single place that names a
 // provider or an offering; display layers project from it instead of keeping a
 // second copy, which is how the same offering used to appear under two names.
+export const PROVIDER_LABELS = {
+    openai: 'OpenAI',
+    anthropic: 'Anthropic',
+    kimi: 'Kimi',
+    bailian: '百炼',
+    deepseek: 'DeepSeek',
+    zhipu: '智谱 AI',
+    ollama: 'Ollama',
+    custom: 'Custom',
+};
 export const DEFAULT_PROVIDER_OFFERINGS = [
     { id: 'api-platform', label: 'API Platform', kind: 'api-platform', lifecycle: 'active', authModes: ['apiKey'] },
 ];
@@ -25,9 +35,8 @@ export const API_KEY_METHOD = {
  * truth, `apiKey`) instead of on a provider-level label, and it points at the
  * `consoleUrl` the offering already carries.
  *
- * Providers without one say something real by not declaring it: DeepSeek has no
- * account console to sign into, Ollama is a local service, and `custom` is
- * configured inside Xpod rather than at a provider.
+ * Providers without this action use the API Key form directly or a local
+ * service. Opening a console does not perform OAuth or connect an account.
  *
  * The id names the action the way its siblings do (browser-login / device-code /
  * local-session-import); the wording follows from the id in the applet, and the
@@ -74,6 +83,7 @@ export const CUSTOM_DEFAULT_OFFERINGS = [
     },
 ];
 const KIMI_SUBSCRIPTION_URL = 'https://www.kimi.com/code';
+const KIMI_SUBSCRIPTION_CONSOLE_URL = 'https://www.kimi.com/code/console';
 const KIMI_USAGE_POLICY_URL = 'https://www.kimi.com/user/agreement';
 const KIMI_CODING_BASE_URL = 'https://api.kimi.com/coding/v1';
 const KIMI_ANTHROPIC_BASE_URL = 'https://api.kimi.com/coding/';
@@ -137,15 +147,16 @@ export const PROVIDER_OFFERINGS = {
     anthropic: [
         {
             id: 'official-subscription',
-            label: 'Claude Code Subscription',
+            label: 'Claude Pro / Max',
             kind: 'oauth-subscription',
             lifecycle: 'unavailable',
             authModes: ['oauth'],
-            productLabel: 'Anthropic',
+            authorizationMethods: [],
+            productLabel: 'Claude Code',
             runtimeProviderIds: ['anthropic'],
             credentialPrefixHints: [],
             consoleUrl: 'https://claude.ai/',
-            subscriptionUrl: 'https://claude.ai/settings/billing',
+            subscriptionUrl: 'https://claude.com/pricing',
             endpoints: [],
             modelDiscovery: { strategy: 'unsupported', path: '/models', endpointProtocol: 'anthropic' },
             quota: { strategy: 'subscription', url: 'https://claude.ai/settings/usage' },
@@ -184,7 +195,7 @@ export const PROVIDER_OFFERINGS = {
             anthropicBaseUrl: KIMI_ANTHROPIC_BASE_URL,
             quotaStrategy: 'subscription',
             quotaUrl: KIMI_SUBSCRIPTION_URL,
-            consoleUrl: KIMI_SUBSCRIPTION_URL,
+            consoleUrl: KIMI_SUBSCRIPTION_CONSOLE_URL,
             subscriptionUrl: KIMI_SUBSCRIPTION_URL,
             usagePolicyUrl: KIMI_USAGE_POLICY_URL,
             // The coding endpoint rejects developer messages, which the runtime has to

package/node_modules/@undefineds.co/ai-connections/dist/controller.d.ts

@@ -1,7 +1,7 @@
 import type { SolidLiveUpdateState, WebExtensionHost } from '@undefineds.co/extension-sdk/web';
-import { type AiConnectionsClient, type AiConnectionsProvider, type AiProviderConnectionSummary, type AiProviderSummary } from './contract/ai-connections-client';
-import type { AiClientConfigurationBridge } from './AiClientConfigurationSection';
-import { type CredentialRow } from './collections';
+import { type AiConnectionsClient, type AiConnectionsProvider, type AiProviderConnectionSummary, type AiProviderSummary } from './contract/ai-connections-client.js';
+import type { AiClientConfigurationBridge } from './AiClientConfigurationSection.js';
+import { type CredentialRow } from './collections.js';
 import type { PodCollection } from '@undefineds.co/pod-collections';
 export interface AiProviderDefinition {
     id: AiConnectionsProvider;
@@ -27,7 +27,7 @@ export type ProviderProductState = 'loading' | 'unconfigured' | 'configured' | '
 export declare const AI_CONNECTIONS_PINNED_SECTIONS: readonly [{
     readonly id: "keys";
     readonly label: "Xpod";
-    readonly title: "API KEYS";
+    readonly title: "Xpod";
 }];
 /**
  * Coalescing window for Pod change signals.
@@ -43,6 +43,7 @@ export interface AiConnectionsController {
     readonly client: AiConnectionsClient | null;
     readonly openExternal: (url: string) => Promise<void>;
     readonly clientConfigurationBridge?: AiClientConfigurationBridge;
+    readonly authorizeService?: () => Promise<void>;
     readonly selectedSection: AiConnectionsWorkspaceSection;
     readonly selectedProvider: AiConnectionsProvider;
     readonly selectedCredentialId?: string;

package/node_modules/@undefineds.co/ai-connections/dist/controller.js

@@ -1,5 +1,7 @@
+import { PROVIDER_LABELS } from './contract/provider-catalog.js';
 import { useSyncExternalStore } from 'react';
 import { AI_CONNECTIONS_PROVIDERS, AiConnectionsRequestError, createAiConnectionsClient, } from './contract/ai-connections-client.js';
+import { parseAiConnectionsServiceAccess } from './service-access.js';
 import { aiConnectionsErrorMessage } from './error-wording.js';
 import { credentialCollectionRuntime, } from './collections.js';
 /**
@@ -13,17 +15,17 @@ import { credentialCollectionRuntime, } from './collections.js';
  * declares.
  */
 export const PROVIDERS = [
-    { id: 'openai', name: 'OpenAI', description: 'OpenAI 官方 GPT 与推理模型，支持 API Key 与订阅导入。', homeUrl: 'https://openai.com', apiKeyUrl: 'https://platform.openai.com/api-keys', apiKeyPlaceholder: 'sk-...', defaultBaseUrl: 'https://api.openai.com/v1' },
-    { id: 'anthropic', name: 'Anthropic', description: 'Anthropic 官方 Claude 模型，支持 API Key 与订阅导入。', homeUrl: 'https://www.anthropic.com', apiKeyUrl: 'https://console.anthropic.com/settings/keys', apiKeyPlaceholder: 'sk-ant-...', defaultBaseUrl: 'https://api.anthropic.com' },
-    { id: 'kimi', name: 'Kimi', description: '月之暗面 Kimi 模型，支持账号订阅、编码套餐与开放平台。', homeUrl: 'https://www.moonshot.cn', apiKeyUrl: 'https://platform.moonshot.cn/console/api-keys', apiKeyPlaceholder: 'sk-...', defaultBaseUrl: 'https://api.moonshot.cn/v1' },
-    { id: 'bailian', name: '百炼', description: '阿里云百炼的通义千问等模型，提供按量与多种套餐。', homeUrl: 'https://www.aliyun.com/product/bailian', apiKeyUrl: 'https://bailian.console.aliyun.com/#/api-key', apiKeyPlaceholder: 'sk-...', defaultBaseUrl: 'https://dashscope.aliyuncs.com/compatible-mode/v1' },
-    { id: 'deepseek', name: 'DeepSeek', description: 'DeepSeek 官方模型，API Key 接入，接口兼容 OpenAI。', homeUrl: 'https://www.deepseek.com', apiKeyUrl: 'https://platform.deepseek.com/api_keys', apiKeyPlaceholder: 'sk-...', defaultBaseUrl: 'https://api.deepseek.com/v1' },
-    { id: 'zhipu', name: '智谱 AI', description: '智谱 GLM 系列模型，支持 API Key 与 GLM 编码套餐。', homeUrl: 'https://open.bigmodel.cn', apiKeyUrl: 'https://open.bigmodel.cn/usercenter/apikeys', apiKeyPlaceholder: 'id.secret-...', defaultBaseUrl: 'https://open.bigmodel.cn/api/paas/v4' },
-    { id: 'ollama', name: 'Ollama', description: '运行在本机的 Ollama 模型，无需 API Key，仅本机可达。', homeUrl: 'https://ollama.com', defaultBaseUrl: 'http://localhost:11434/v1' },
-    { id: 'custom', name: 'Custom', description: '任意 OpenAI 或 Anthropic 兼容服务，自填地址与 API Key。', homeUrl: 'https://undefineds.co', apiKeyPlaceholder: 'sk-...', defaultBaseUrl: 'https://example.com/v1' },
+    { id: 'openai', name: PROVIDER_LABELS.openai, description: 'OpenAI 官方 GPT 与推理模型，支持 API Key 与订阅导入。', homeUrl: 'https://openai.com', apiKeyUrl: 'https://platform.openai.com/api-keys', apiKeyPlaceholder: 'sk-...', defaultBaseUrl: 'https://api.openai.com/v1' },
+    { id: 'anthropic', name: PROVIDER_LABELS.anthropic, description: 'Anthropic 官方 Claude 模型，API Key 接入；Pro/Max 订阅通过 Claude Code 使用。', homeUrl: 'https://www.anthropic.com', apiKeyUrl: 'https://console.anthropic.com/settings/keys', apiKeyPlaceholder: 'sk-ant-...', defaultBaseUrl: 'https://api.anthropic.com' },
+    { id: 'kimi', name: PROVIDER_LABELS.kimi, description: '月之暗面 Kimi 模型，支持账号订阅、编码套餐与开放平台。', homeUrl: 'https://www.moonshot.cn', apiKeyUrl: 'https://platform.moonshot.cn/console/api-keys', apiKeyPlaceholder: 'sk-...', defaultBaseUrl: 'https://api.moonshot.cn/v1' },
+    { id: 'bailian', name: PROVIDER_LABELS.bailian, description: '阿里云百炼的通义千问等模型，提供按量与多种套餐。', homeUrl: 'https://www.aliyun.com/product/bailian', apiKeyUrl: 'https://bailian.console.aliyun.com/#/api-key', apiKeyPlaceholder: 'sk-...', defaultBaseUrl: 'https://dashscope.aliyuncs.com/compatible-mode/v1' },
+    { id: 'deepseek', name: PROVIDER_LABELS.deepseek, description: 'DeepSeek 官方模型，API Key 接入，接口兼容 OpenAI。', homeUrl: 'https://www.deepseek.com', apiKeyUrl: 'https://platform.deepseek.com/api_keys', apiKeyPlaceholder: 'sk-...', defaultBaseUrl: 'https://api.deepseek.com/v1' },
+    { id: 'zhipu', name: PROVIDER_LABELS.zhipu, description: '智谱 GLM 系列模型，支持 API Key 与 GLM 编码套餐。', homeUrl: 'https://open.bigmodel.cn', apiKeyUrl: 'https://open.bigmodel.cn/usercenter/apikeys', apiKeyPlaceholder: 'id.secret-...', defaultBaseUrl: 'https://open.bigmodel.cn/api/paas/v4' },
+    { id: 'ollama', name: PROVIDER_LABELS.ollama, description: '运行在本机的 Ollama 模型，无需 API Key，仅本机可达。', homeUrl: 'https://ollama.com', defaultBaseUrl: 'http://localhost:11434/v1' },
+    { id: 'custom', name: PROVIDER_LABELS.custom, description: '任意 OpenAI 或 Anthropic 兼容服务，自填地址与 API Key。', homeUrl: 'https://undefineds.co', apiKeyPlaceholder: 'sk-...', defaultBaseUrl: 'https://example.com/v1' },
 ];
 export const AI_CONNECTIONS_PINNED_SECTIONS = [
-    { id: 'keys', label: 'Xpod', title: 'API KEYS' },
+    { id: 'keys', label: 'Xpod', title: 'Xpod' },
 ];
 /**
  * Coalescing window for Pod change signals.
@@ -286,6 +288,19 @@ export function createAiConnectionsController(host) {
         client,
         openExternal: host.navigation.openExternal,
         clientConfigurationBridge: host.capabilities.aiClientConfiguration,
+        authorizeService: client && readyPod && host.solid.permissions ? async () => {
+            if (!isCurrentSession())
+                throw new Error('登录状态已变化，请重新打开 AI 连接。');
+            const descriptor = parseAiConnectionsServiceAccess(await client.getServiceAccess(), readyPod.current.podUrl);
+            if (!isCurrentSession())
+                throw new Error('登录状态已变化，请重新打开 AI 连接。');
+            const result = await host.solid.permissions.ensureAgentAccess(descriptor);
+            if (result.status !== 'granted')
+                throw new Error('未能授权 Xpod 访问，请确认你有这个 Pod 的管理权限。');
+            if (!isCurrentSession())
+                throw new Error('登录状态已变化，请重新打开 AI 连接。');
+            await controller.loadProviders();
+        } : undefined,
         get credentialsCollection() {
             return credentials?.collection;
         },