@undefineds.co/xpod 0.4.25 → 0.4.28

package/dist/util/task-model-diagnostics.js

@@ -0,0 +1,118 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TASK_MODEL_SDK_ERROR_KINDS = exports.TASK_GATEWAY_DIAGNOSTIC_CODES = exports.TASK_GATEWAY_DIAGNOSTIC_ROUTES = exports.TASK_MODEL_DIAGNOSTIC_STOP_REASONS = exports.TASK_MODEL_DIAGNOSTIC_APIS = exports.TASK_MODEL_DIAGNOSTIC_STAGES = void 0;
+exports.hashTaskModelDiagnosticSession = hashTaskModelDiagnosticSession;
+exports.classifyTaskModelSdkErrorHint = classifyTaskModelSdkErrorHint;
+exports.selectTaskModelDiagnosticReceipt = selectTaskModelDiagnosticReceipt;
+const node_crypto_1 = require("node:crypto");
+exports.TASK_MODEL_DIAGNOSTIC_STAGES = [
+    'not_invoked', 'model_invoked', 'payload_prepared', 'stream_open',
+];
+exports.TASK_MODEL_DIAGNOSTIC_APIS = ['openai-completions', 'openai-responses', 'other'];
+exports.TASK_MODEL_DIAGNOSTIC_STOP_REASONS = ['error', 'aborted', 'unknown'];
+exports.TASK_GATEWAY_DIAGNOSTIC_ROUTES = ['chat_completions', 'responses', 'anthropic_messages'];
+exports.TASK_GATEWAY_DIAGNOSTIC_CODES = [
+    'invalid_request', 'invalid_tool_arguments', 'unsupported_protocol_event', 'service_access_missing',
+    'credential_unavailable', 'model_not_available', 'no_model_available', 'embedding_model_not_allowed',
+    'provider_error', 'internal_error',
+];
+exports.TASK_MODEL_SDK_ERROR_KINDS = [
+    'http_status', 'connection', 'timeout', 'aborted', 'length_limit', 'content_filter', 'unknown',
+];
+/** Hash the exact header bytes; malformed headers never enter a diagnostic receipt. */
+function hashTaskModelDiagnosticSession(sessionHeader) {
+    if (typeof sessionHeader !== 'string'
+        || !/^[A-Za-z0-9][A-Za-z0-9_.:/-]{0,255}$/u.test(sessionHeader))
+        return undefined;
+    return (0, node_crypto_1.createHash)('sha256').update(sessionHeader).digest('hex');
+}
+function member(value, allowed) {
+    return typeof value === 'string' && allowed.some(entry => entry === value);
+}
+function boundedInteger(value, min, max) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= min && value <= max;
+}
+const SDK_ERROR_MESSAGE_LIMIT = 8192;
+// openai/core/error.mjs APIError.makeMessage prefixes "<status> " to the body message.
+const SDK_HTTP_STATUS_PREFIX = /^([45]\d{2}) \S/u;
+const SDK_EXACT_ERROR_KINDS = new Map([
+    ['Connection error.', 'connection'],
+    ['Request timed out.', 'timeout'],
+    ['Request was aborted.', 'aborted'],
+    ['Could not parse response content as the length limit was reached', 'length_limit'],
+    ['Could not parse response content as the request was rejected by the content filter', 'content_filter'],
+]);
+/**
+ * Classify the installed SDK's provider error message into a fixed enum.
+ * Only the SDK's own leading status prefix and exact error constants are
+ * recognized; embedded response text is never inspected or retained.
+ */
+function classifyTaskModelSdkErrorHint(message) {
+    if (typeof message !== 'string' || message.length === 0)
+        return undefined;
+    const head = message.slice(0, SDK_ERROR_MESSAGE_LIMIT);
+    const status = SDK_HTTP_STATUS_PREFIX.exec(head);
+    if (status) {
+        const code = Number(status[1]);
+        if (code >= 400 && code <= 599)
+            return { kind: 'http_status', status: code };
+    }
+    return { kind: SDK_EXACT_ERROR_KINDS.get(head) ?? 'unknown' };
+}
+function selectTaskModelSdkErrorHint(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    const row = value;
+    if (!member(row.kind, exports.TASK_MODEL_SDK_ERROR_KINDS))
+        return undefined;
+    if (row.kind === 'http_status') {
+        return boundedInteger(row.status, 400, 599) ? { kind: 'http_status', status: row.status } : undefined;
+    }
+    return row.status === undefined ? { kind: row.kind } : undefined;
+}
+/** The sole field allowlist used by producers and the candidate artifact projector. */
+function selectTaskModelDiagnosticReceipt(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    const row = value;
+    if (row.schemaVersion !== 1 || row.scope !== 'session'
+        || typeof row.correlationHash !== 'string' || !/^[a-f0-9]{64}$/u.test(row.correlationHash))
+        return undefined;
+    const common = { schemaVersion: 1, scope: 'session', correlationHash: row.correlationHash };
+    if (row.event === 'xpod.task-gateway-http-diagnostic') {
+        if (!member(row.route, exports.TASK_GATEWAY_DIAGNOSTIC_ROUTES) || !boundedInteger(row.callerHTTPstatus, 400, 599)
+            || (row.statusSource !== 'response_finished' && row.statusSource !== 'response_closed')
+            || !boundedInteger(row.durationMs, 0, 2147483647))
+            return undefined;
+        return { event: row.event, ...common, route: row.route, callerHTTPstatus: row.callerHTTPstatus,
+            statusSource: row.statusSource, durationMs: row.durationMs };
+    }
+    if (row.event === 'xpod.task-model-diagnostic') {
+        if (!member(row.stage, exports.TASK_MODEL_DIAGNOSTIC_STAGES) || !member(row.api, exports.TASK_MODEL_DIAGNOSTIC_APIS)
+            || !member(row.stopReason, exports.TASK_MODEL_DIAGNOSTIC_STOP_REASONS)
+            || !boundedInteger(row.retryCount, 0, Number.MAX_SAFE_INTEGER)
+            || typeof row.credentialPresent !== 'boolean' || row.httpStatus !== null)
+            return undefined;
+        const receipt = { event: row.event, ...common, stage: row.stage, api: row.api,
+            stopReason: row.stopReason, retryCount: row.retryCount, credentialPresent: row.credentialPresent, httpStatus: null };
+        if (row.sdkErrorHint !== undefined) {
+            const sdkErrorHint = selectTaskModelSdkErrorHint(row.sdkErrorHint);
+            if (!sdkErrorHint)
+                return undefined;
+            receipt.sdkErrorHint = sdkErrorHint;
+        }
+        return receipt;
+    }
+    if (row.event === 'xpod.task-gateway-diagnostic') {
+        if (!member(row.route, exports.TASK_GATEWAY_DIAGNOSTIC_ROUTES) || !member(row.code, exports.TASK_GATEWAY_DIAGNOSTIC_CODES)
+            || !boundedInteger(row.callerHTTPstatus, 100, 599) || typeof row.streamOpen !== 'boolean'
+            || !boundedInteger(row.durationMs, 0, 2147483647)
+            || (row.underlyingErrorStatus !== undefined && !boundedInteger(row.underlyingErrorStatus, 100, 599)))
+            return undefined;
+        return { event: row.event, ...common, route: row.route, callerHTTPstatus: row.callerHTTPstatus,
+            code: row.code, ...(row.underlyingErrorStatus === undefined ? {} : { underlyingErrorStatus: row.underlyingErrorStatus }),
+            streamOpen: row.streamOpen, durationMs: row.durationMs };
+    }
+    return undefined;
+}
+//# sourceMappingURL=task-model-diagnostics.js.map

package/node_modules/@undefineds.co/ai-connections/dist/AiApiKeyPool.d.ts

@@ -27,6 +27,7 @@ export declare function AiApiKeyPool({ definition, offering, createOfferings, st
         priority: number;
     }) => Promise<void>;
     onUpdateCredential?: (credential: AiProviderCredentialSummary, patch: {
+        apiKey?: string;
         label?: string;
         enabled?: boolean;
         priority?: number;

package/node_modules/@undefineds.co/ai-connections/dist/AiApiKeyPool.js

@@ -106,6 +106,7 @@ export function AiApiKeyPool({ definition, offering, createOfferings, status, cr
             onSavingChange?.(true);
             try {
                 await onUpdateCredential(editingCredential, {
+                    ...(poolApiKey.trim() ? { apiKey: poolApiKey.trim() } : {}),
                     label: poolLabel.trim() || undefined,
                     baseUrl: poolBaseUrl.trim() || undefined,
                     ...(proxyChanged ? { proxyUrl: normalizedProxyUrl } : {}),
@@ -122,7 +123,7 @@ export function AiApiKeyPool({ definition, offering, createOfferings, status, cr
             }
         }
     };
-    return (_jsxs("div", { className: cn('space-y-3', formMode && 'w-full'), children: [attempt?.userCode ? (_jsxs("div", { className: "border-l-2 border-primary bg-muted/30 px-3 py-2 text-sm", children: ["\u9A8C\u8BC1\u7801\uFF1A", _jsx("strong", { className: "font-mono", children: attempt.userCode })] })) : null, !initialCreate && !initialEditing ? _jsxs("div", { className: "flex flex-wrap gap-2", children: [onCreateApiKeyCredential && createOfferings.length > 0 ? (_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: openCreateForm, children: [_jsx(Plus, { className: "mr-2 h-4 w-4" }), "\u6DFB\u52A0 API Key"] })) : null, hasPoolActions ? null : isConnected ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(RotateCw, { className: "mr-2 h-4 w-4" }), "\u91CD\u65B0\u8FDE\u63A5"] }), _jsxs(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: [_jsx(LogOut, { className: "mr-2 h-4 w-4" }), "\u65AD\u5F00\u8FDE\u63A5"] })] })) : isConfigured ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", "aria-label": "\u66F4\u65B0 API Key", disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u66F4\u65B0 API Key"] }), _jsx(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: "\u79FB\u9664\u914D\u7F6E" })] })) : (_jsxs(_Fragment, { children: [browserMethod ? (_jsxs(Button, { variant: "outline", size: "sm", title: browserMethod.lifecycle === 'unavailable' ? browserMethod.reason : undefined, disabled: busy || disabled || saving || browserMethod.lifecycle === 'unavailable', onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(ExternalLink, { className: "mr-2 h-4 w-4" }), browserMethod.label] })) : null, _jsxs(Button, { variant: "outline", size: "sm", "aria-label": `${definition.name} API Key`, disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u914D\u7F6E API Key"] })] }))] }) : null, formMode ? (_jsxs("div", { className: "space-y-2 rounded-lg border border-border/50 bg-muted/10 p-3", children: [formMode === 'create' && createOfferings.length > 1 ? (_jsxs("label", { className: "block space-y-1 text-xs text-muted-foreground", children: [_jsx("span", { children: "\u5957\u9910 / \u533A\u57DF" }), _jsx(NativeSelect, { "aria-label": `${definition.name} 套餐 / 区域`, value: createOfferingId, disabled: busy || disabled || saving, onChange: (event) => { setCreateOfferingId(event.target.value); setPoolFormError(undefined); }, className: "h-9", children: createOfferings.map((item) => _jsx("option", { value: item.id, children: offeringTitle(item) }, item.id)) })] })) : null, formMode === 'edit' ? (_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "aria-label": `${definition.name} API Key 标签`, placeholder: "\u540D\u79F0\uFF0C\u4F8B\u5982 Work key", value: poolLabel, onChange: (event) => setPoolLabel(event.target.value) })) : null, formMode === 'create' ? (_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: poolApiKey, onChange: (event) => setPoolApiKey(event.target.value), className: "font-mono" })) : null, formMode === 'edit' || showAdvanced ? (_jsxs(_Fragment, { children: [_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Base URL 输入`, placeholder: offeringEndpoint(formMode === 'edit' ? offering : formOffering) || definition.defaultBaseUrl || '默认服务地址', value: poolBaseUrl, onChange: (event) => setPoolBaseUrl(event.target.value), className: "font-mono text-xs" }), _jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Proxy URL 输入`, placeholder: "http://127.0.0.1:7890", value: poolProxyUrl, onChange: (event) => setPoolProxyUrl(event.target.value), className: "font-mono text-xs" })] })) : null, poolFormError ? _jsx("p", { className: "text-xs text-destructive", children: poolFormError }) : null, _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx(Button, { size: "sm", "aria-label": formMode === 'create' ? `保存 ${definition.name} API Key` : '保存凭证', disabled: busy || disabled || saving || (formMode === 'create' && !poolApiKey.trim()), onClick: savePoolForm, children: formMode === 'create' ? '保存 API Key' : '保存凭证' }), _jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: closePoolForm, children: "\u53D6\u6D88" }), formMode === 'create' ? (_jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: () => setShowAdvanced((current) => !current), children: showAdvanced ? '收起高级设置' : '高级设置' })) : null] })] })) : null, apiKeyAttempt && !formMode ? (_jsxs("div", { className: "space-y-2", children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsx("span", { className: "text-sm font-medium", children: "API Key" }), definition.apiKeyUrl ? (_jsx("a", { href: definition.apiKeyUrl, target: "_blank", rel: "noreferrer", className: "text-xs text-primary hover:underline", children: "\u83B7\u53D6 API Key" })) : null] }), _jsxs("div", { className: "group relative", children: [_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: apiKey, onChange: (event) => onApiKeyChange(event.target.value), className: "border-border/60 bg-muted/20 pr-10 font-mono transition-colors focus:border-primary/50 focus:bg-background" }), _jsx("div", { className: "absolute bottom-1 right-1 top-1 flex items-center", children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-full w-8 rounded hover:bg-muted", onClick: () => setShowKey((current) => !current), "aria-label": showKey ? '隐藏 API Key' : '显示 API Key', children: showKey
+    return (_jsxs("div", { className: cn('space-y-3', formMode && 'w-full'), children: [attempt?.userCode ? (_jsxs("div", { className: "border-l-2 border-primary bg-muted/30 px-3 py-2 text-sm", children: ["\u9A8C\u8BC1\u7801\uFF1A", _jsx("strong", { className: "font-mono", children: attempt.userCode })] })) : null, !initialCreate && !initialEditing ? _jsxs("div", { className: "flex flex-wrap gap-2", children: [onCreateApiKeyCredential && createOfferings.length > 0 ? (_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: openCreateForm, children: [_jsx(Plus, { className: "mr-2 h-4 w-4" }), "\u6DFB\u52A0 API Key"] })) : null, hasPoolActions ? null : isConnected ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", disabled: busy || disabled || saving, onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(RotateCw, { className: "mr-2 h-4 w-4" }), "\u91CD\u65B0\u8FDE\u63A5"] }), _jsxs(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: [_jsx(LogOut, { className: "mr-2 h-4 w-4" }), "\u65AD\u5F00\u8FDE\u63A5"] })] })) : isConfigured ? (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", "aria-label": "\u66F4\u65B0 API Key", disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u66F4\u65B0 API Key"] }), _jsx(Button, { variant: "ghost", size: "sm", disabled: busy || disabled || saving, onClick: onDisconnect, children: "\u79FB\u9664\u914D\u7F6E" })] })) : (_jsxs(_Fragment, { children: [browserMethod ? (_jsxs(Button, { variant: "outline", size: "sm", title: browserMethod.lifecycle === 'unavailable' ? browserMethod.reason : undefined, disabled: busy || disabled || saving || browserMethod.lifecycle === 'unavailable', onClick: onBeginBrowser, children: [busy ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(ExternalLink, { className: "mr-2 h-4 w-4" }), browserMethod.label] })) : null, _jsxs(Button, { variant: "outline", size: "sm", "aria-label": `${definition.name} API Key`, disabled: busy || disabled || saving, onClick: onBeginApiKey, children: [_jsx(KeyRound, { className: "mr-2 h-4 w-4" }), "\u914D\u7F6E API Key"] })] }))] }) : null, formMode ? (_jsxs("div", { className: "space-y-2 rounded-lg border border-border/50 bg-muted/10 p-3", children: [formMode === 'create' && createOfferings.length > 1 ? (_jsxs("label", { className: "block space-y-1 text-xs text-muted-foreground", children: [_jsx("span", { children: "\u5957\u9910 / \u533A\u57DF" }), _jsx(NativeSelect, { "aria-label": `${definition.name} 套餐 / 区域`, value: createOfferingId, disabled: busy || disabled || saving, onChange: (event) => { setCreateOfferingId(event.target.value); setPoolFormError(undefined); }, className: "h-9", children: createOfferings.map((item) => _jsx("option", { value: item.id, children: offeringTitle(item) }, item.id)) })] })) : null, formMode === 'edit' ? (_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "aria-label": `${definition.name} API Key 标签`, placeholder: "\u540D\u79F0\uFF0C\u4F8B\u5982 Work key", value: poolLabel, onChange: (event) => setPoolLabel(event.target.value) })) : null, formMode === 'create' || formMode === 'edit' ? (_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: formMode === 'edit' ? '留空保留现有 Key，填写以替换' : definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: poolApiKey, onChange: (event) => setPoolApiKey(event.target.value), className: "font-mono" })) : null, formMode === 'edit' || showAdvanced ? (_jsxs(_Fragment, { children: [_jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Base URL 输入`, placeholder: offeringEndpoint(formMode === 'edit' ? offering : formOffering) || definition.defaultBaseUrl || '默认服务地址', value: poolBaseUrl, onChange: (event) => setPoolBaseUrl(event.target.value), className: "font-mono text-xs" }), _jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Proxy URL 输入`, placeholder: "http://127.0.0.1:7890", value: poolProxyUrl, onChange: (event) => setPoolProxyUrl(event.target.value), className: "font-mono text-xs" })] })) : null, poolFormError ? _jsx("p", { className: "text-xs text-destructive", children: poolFormError }) : null, _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx(Button, { size: "sm", "aria-label": formMode === 'create' ? `保存 ${definition.name} API Key` : '保存凭证', disabled: busy || disabled || saving || (formMode === 'create' && !poolApiKey.trim()), onClick: savePoolForm, children: formMode === 'create' ? '保存 API Key' : '保存凭证' }), _jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: closePoolForm, children: "\u53D6\u6D88" }), formMode === 'create' ? (_jsx(Button, { variant: "ghost", size: "sm", disabled: saving, onClick: () => setShowAdvanced((current) => !current), children: showAdvanced ? '收起高级设置' : '高级设置' })) : null] })] })) : null, apiKeyAttempt && !formMode ? (_jsxs("div", { className: "space-y-2", children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsx("span", { className: "text-sm font-medium", children: "API Key" }), definition.apiKeyUrl ? (_jsx("a", { href: definition.apiKeyUrl, target: "_blank", rel: "noreferrer", className: "text-xs text-primary hover:underline", children: "\u83B7\u53D6 API Key" })) : null] }), _jsxs("div", { className: "group relative", children: [_jsx(Input, { disabled: busy || disabled || saving, type: showKey ? 'text' : 'password', autoComplete: "new-password", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} API Key 输入`, placeholder: definition.apiKeyPlaceholder || '从官方控制台复制 API Key', value: apiKey, onChange: (event) => onApiKeyChange(event.target.value), className: "border-border/60 bg-muted/20 pr-10 font-mono transition-colors focus:border-primary/50 focus:bg-background" }), _jsx("div", { className: "absolute bottom-1 right-1 top-1 flex items-center", children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-full w-8 rounded hover:bg-muted", onClick: () => setShowKey((current) => !current), "aria-label": showKey ? '隐藏 API Key' : '显示 API Key', children: showKey
                                         ? _jsx(EyeOff, { className: "h-4 w-4 text-muted-foreground" })
                                         : _jsx(Eye, { className: "h-4 w-4 text-muted-foreground" }) }) })] }), onBaseUrlChange ? (_jsxs("div", { className: "space-y-1.5", children: [_jsx("span", { className: "text-xs font-medium text-muted-foreground", children: "Base URL\uFF08\u9009\u586B\uFF09" }), _jsx(Input, { disabled: busy || disabled || saving, autoComplete: "off", "data-lpignore": "true", "data-1p-ignore": true, "aria-label": `${definition.name} Base URL 输入`, placeholder: definition.defaultBaseUrl || '默认服务地址', value: baseUrl, onChange: (event) => onBaseUrlChange(event.target.value), className: "border-border/60 bg-muted/20 font-mono text-xs transition-colors focus:border-primary/50 focus:bg-background" }), _jsxs("p", { className: "break-all font-mono text-[11px] text-muted-foreground opacity-80", children: [_jsx("span", { className: "mr-1 select-none opacity-50", children: "\u9884\u89C8:" }), (baseUrl.trim() || definition.defaultBaseUrl || '').replace(/\/+$/, ''), "/chat/completions"] })] })) : null, _jsx(Button, { size: "sm", "aria-label": `保存 ${definition.name} API Key`, disabled: !apiKey.trim() || busy || disabled, onClick: onSaveApiKey, children: "\u4FDD\u5B58 API Key" })] })) : null, error ? _jsx("p", { className: "text-sm text-destructive", children: error }) : null] }));
 }

package/node_modules/@undefineds.co/ai-connections/dist/AiConnectDialog.d.ts

@@ -30,6 +30,7 @@ export declare function AiConnectDialog({ controller, definition, offerings, api
     onSaveApiKey: () => void;
     onDisconnect: (credential?: AiProviderCredentialSummary) => void;
     onUpdateCredential?: (credential: AiProviderCredentialSummary, patch: {
+        apiKey?: string;
         label?: string;
         enabled?: boolean;
         priority?: number;

package/node_modules/@undefineds.co/ai-connections/dist/AiCredentialPoolSection.d.ts

@@ -48,6 +48,7 @@ export declare function AiCredentialPoolSection({ definition, product, status, a
     }) => Promise<void>;
     onCreateLocalCredential?: (offering: AiProviderOffering, method?: AiProviderAuthorizationMethod) => Promise<void>;
     onUpdateCredential?: (credential: AiProviderCredentialSummary, patch: {
+        apiKey?: string;
         label?: string;
         enabled?: boolean;
         priority?: number;

package/node_modules/@undefineds.co/ai-connections/dist/AiCredentialPoolSection.js

@@ -1,5 +1,5 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { Button, TooltipProvider } from '@undefineds.co/shared-ui';
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { Button, SectionHeader, TooltipProvider } from '@undefineds.co/shared-ui';
 import { Plus, Settings2 } from 'lucide-react';
 import { offeringTitle } from './offering-label.js';
 import { authorizationMethodsForOffering, connectEntryRank, isApiKeyMethod, isBrowserConnectMethod, isLocalMethod, isOAuthMethod, isOAuthMode, isPendingAttempt, } from './authorization-methods.js';
@@ -61,14 +61,14 @@ export function AiCredentialPoolSection({ definition, product, status, accountLa
         onBeginBrowser,
         onCreateLocalCredential,
     });
-    return (_jsx(TooltipProvider, { children: _jsxs("section", { className: "space-y-3", "aria-label": "\u5F53\u524D\u8FDE\u63A5", children: [_jsxs("div", { className: "flex flex-wrap items-center justify-between gap-2", children: [_jsxs("h3", { className: "flex items-center gap-2 text-sm font-medium text-foreground/90", children: [_jsx(Settings2, { "aria-hidden": "true", className: "h-4 w-4 text-primary" }), "\u5F53\u524D\u8FDE\u63A5"] }), _jsxs("div", { "data-testid": "provider-connect-actions", className: "flex flex-wrap items-center justify-end gap-2", children: [credentials.length > 1 ? (_jsx(Button, { variant: "ghost", size: "sm", "aria-label": `刷新全部 ${definition.name}额度`, disabled: disabled || quotaBusy || !credentials.some((c) => c.enabled) || !onRefreshQuota, onClick: () => offerings.forEach((offering) => onRefreshQuota?.(offering)), children: quotaBusy ? '查询中' : '刷新全部额度' })) : null, connectEntries.map((item) => {
-                                    if ('authorization' in item) {
-                                        return (_jsx("fieldset", { className: "m-0 min-w-0 border-0 p-0", "aria-label": `${offeringTitle(item.authorization.offering)}快捷接入`, children: _jsx(AiAuthorizationActions, { methods: [item.authorization.method], offering: item.authorization.offering, busy: busy || dialog.saving, disabled: disabled || authorizationPending, onBeginOffering: onBeginOffering ? dialog.beginAuthorization : undefined, onCreateLocalCredential: onCreateLocalCredential ? dialog.beginLocal : undefined }) }, item.key));
-                                    }
-                                    return (_jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", "aria-label": "\u65B0\u5EFA API Key \u8FDE\u63A5", title: item.apiKeyMethod.lifecycle === 'unavailable' ? item.apiKeyMethod.reason : undefined, disabled: busy || dialog.saving || disabled || authorizationPending
-                                            || item.apiKeyMethod.lifecycle === 'unavailable'
-                                            || (!product && status === 'pending' && !attempt), onClick: dialog.beginApiKey, children: [_jsx(Plus, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), item.apiKeyMethod.label] }, item.key));
-                                })] })] }), offeringMethods.filter(({ offering, methods }) => offering.lifecycle === 'unavailable'
+    return (_jsx(TooltipProvider, { children: _jsxs("section", { className: "space-y-3", "aria-label": "\u5F53\u524D\u8FDE\u63A5", children: [_jsx(SectionHeader, { level: 3, className: "items-center gap-2", titleClassName: "flex items-center gap-2 text-sm font-medium text-foreground/90", title: _jsxs(_Fragment, { children: [_jsx(Settings2, { "aria-hidden": "true", className: "h-4 w-4 text-primary" }), "\u5F53\u524D\u8FDE\u63A5"] }), actions: _jsxs("div", { "data-testid": "provider-connect-actions", className: "flex flex-wrap items-center justify-end gap-2", children: [credentials.length > 1 ? (_jsx(Button, { variant: "ghost", size: "sm", "aria-label": `刷新全部 ${definition.name}额度`, disabled: disabled || quotaBusy || !credentials.some((c) => c.enabled) || !onRefreshQuota, onClick: () => offerings.forEach((offering) => onRefreshQuota?.(offering)), children: quotaBusy ? '查询中' : '刷新全部额度' })) : null, connectEntries.map((item) => {
+                                if ('authorization' in item) {
+                                    return (_jsx("fieldset", { className: "m-0 min-w-0 border-0 p-0", "aria-label": `${offeringTitle(item.authorization.offering)}快捷接入`, children: _jsx(AiAuthorizationActions, { methods: [item.authorization.method], offering: item.authorization.offering, busy: busy || dialog.saving, disabled: disabled || authorizationPending, onBeginOffering: onBeginOffering ? dialog.beginAuthorization : undefined, onCreateLocalCredential: onCreateLocalCredential ? dialog.beginLocal : undefined }) }, item.key));
+                                }
+                                return (_jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", "aria-label": "\u65B0\u5EFA API Key \u8FDE\u63A5", title: item.apiKeyMethod.lifecycle === 'unavailable' ? item.apiKeyMethod.reason : undefined, disabled: busy || dialog.saving || disabled || authorizationPending
+                                        || item.apiKeyMethod.lifecycle === 'unavailable'
+                                        || (!product && status === 'pending' && !attempt), onClick: dialog.beginApiKey, children: [_jsx(Plus, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), item.apiKeyMethod.label] }, item.key));
+                            })] }) }), offeringMethods.filter(({ offering, methods }) => offering.lifecycle === 'unavailable'
                     && !methods.some((method) => method.lifecycle === 'active')).map(({ offering, methods }) => (_jsx(AiOfferingDetails, { offering: offering, methods: methods }, offering.id))), credentials.some((credential) => credential.enabled && (credential.health === 'expired' || credential.health === 'invalid' || credential.lastFailureCode === 'quota_exhausted')) ? _jsxs("p", { role: "status", className: "text-sm text-destructive", children: [credentials.length, " \u6761\u91CC\u6709 ", credentials.filter((credential) => credential.enabled && credential.health === 'healthy' && credential.lastFailureCode !== 'quota_exhausted').length, " \u6761\u5DF2\u9A8C\u8BC1\u53EF\u7528"] }) : null, credentials.some((credential) => credential.enabled && credential.lastFailureCode === 'upstream_unavailable') ?
                     _jsx("p", { role: "status", className: "text-sm text-destructive", children: "\u8FDE\u63A5\u6682\u65F6\u4E0D\u53EF\u7528\uFF0C\u8BF7\u68C0\u67E5\u7F51\u7EDC\u6216\u7A0D\u540E\u91CD\u8BD5\u3002" }) : null, _jsxs("div", { "aria-label": "\u51ED\u636E\u5217\u8868", className: "space-y-2", children: [_jsx(AiSortableCredentialList, { credentials: orderedCredentials, disabled: busy || disabled, onMove: onReorderCredentials ? (from, to) => {
                                 const offering = offerings.find((item) => item.id === orderedCredentials[from]?.offeringId);

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeyRow.d.ts

@@ -9,7 +9,7 @@ export interface AiGatewayKeyBinding {
  * carries only the purpose declared at creation, the client it was written
  * into, when it was last used, and the one action that still applies: destroy.
  */
-export declare function AiGatewayKeyRow({ record, busy, confirming, configurationStatus, onReissue, onEnable, onRequestDestroy, onCancelDestroy, onDestroy, }: {
+export declare function AiGatewayKeyRow({ record, busy, confirming, configurationStatus, onReissue, onEnable, onTest, testing, onRequestDestroy, onCancelDestroy, onDestroy, }: {
     record: GatewayKeyRecord;
     busy: boolean;
     /** §7.3：销毁前先说明影响，第二次点击才真正删除。 */
@@ -17,6 +17,8 @@ export declare function AiGatewayKeyRow({ record, busy, confirming, configuratio
     configurationStatus?: AiClientConfigurationStatus;
     onReissue?: () => void;
     onEnable?: () => void;
+    onTest?: () => void;
+    testing?: boolean;
     onRequestDestroy: () => void;
     onCancelDestroy: () => void;
     onDestroy: () => void;

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeyRow.js

@@ -7,14 +7,14 @@ import { AI_CLIENT_LABELS, AI_CONNECTIONS_CLIENTS, AiClientIcon, } from './AiCli
  * carries only the purpose declared at creation, the client it was written
  * into, when it was last used, and the one action that still applies: destroy.
  */
-export function AiGatewayKeyRow({ record, busy, confirming = false, configurationStatus, onReissue, onEnable, onRequestDestroy, onCancelDestroy, onDestroy, }) {
+export function AiGatewayKeyRow({ record, busy, confirming = false, configurationStatus, onReissue, onEnable, onTest, testing = false, onRequestDestroy, onCancelDestroy, onDestroy, }) {
     const label = record.name || '未命名 Xpod 密钥';
     const binding = gatewayKeyBinding(record);
     // Credentials issued through CSS are revoked by client id; a record without
     // one cannot be destroyed from here, so the row says so instead of offering
     // an action that always fails.
     const destroyable = record.kind !== 'client-credentials' || Boolean(record.clientCredentialId);
-    return (_jsxs("li", { "data-key-id": record.id, "data-key-binding": record.appliedTo ? 'bound' : 'unbound', className: "flex flex-wrap items-center gap-x-4 gap-y-2 border-b border-border/60 px-4 py-3 first:rounded-t-xl last:rounded-b-xl last:border-b-0", children: [_jsxs("dl", { className: "flex min-w-0 flex-1 basis-64 flex-wrap items-center gap-x-6 gap-y-2", children: [_jsx(KeyField, { label: "\u540D\u79F0", className: "min-w-0 flex-1 basis-28", children: _jsx("span", { className: "block truncate text-sm font-medium text-foreground/90", title: label, children: label }) }), _jsx(KeyField, { label: "\u5E94\u7528\u5230", className: "min-w-0 flex-1 basis-28", children: _jsxs("span", { className: "flex min-w-0 items-center gap-1.5 text-xs text-muted-foreground", children: [binding.clientId ? _jsx(AiClientIcon, { client: binding.clientId, className: "h-3.5 w-3.5" }) : null, _jsx("span", { className: "truncate", title: binding.label, children: binding.label })] }) }), _jsx(KeyField, { label: "\u6700\u540E\u4F7F\u7528", className: "shrink-0", children: _jsx("span", { className: "block text-xs text-muted-foreground", children: record.lastUsedAt ? formatTimestamp(record.lastUsedAt) : '暂无调用记录' }) }), _jsx(KeyField, { label: "\u8303\u56F4", children: _jsx("span", { className: "text-xs", children: "\u8303\u56F4\uFF1A\u6574\u4E2A Pod" }) }), record.appliedAt ? _jsx(KeyField, { label: "\u5199\u5165\u65F6\u95F4", children: _jsx("span", { className: "text-xs", children: formatTimestamp(record.appliedAt) }) }) : null] }), configurationStatus && (configurationStatus.status === 'unavailable' || (record.fingerprint && configurationStatus.appliedKeyFingerprint === record.fingerprint)) && configurationStatus.status !== 'configured' && configurationStatus.status !== 'notConfigured' ? (_jsx("p", { role: "status", className: "order-last w-full text-sm text-muted-foreground", children: configurationStatusLabel(configurationStatus.status) })) : null, record.plaintextAvailable === false && onReissue ? _jsxs("div", { className: "order-last flex w-full flex-wrap items-center gap-2 text-xs text-muted-foreground", children: [_jsx("span", { children: "\u5BC6\u94A5\u539F\u6587\u6CA1\u6709\u4FDD\u5B58\uFF0C\u4E0D\u80FD\u518D\u663E\u793A" }), _jsx(Button, { variant: "ghost", size: "sm", disabled: busy, onClick: onReissue, children: "\u91CD\u65B0\u7B7E\u53D1" })] }) : null, record.disabledAt ? _jsxs("div", { className: "order-last flex w-full items-center gap-2 text-sm text-muted-foreground", children: ["\u5DF2\u505C\u7528", onEnable ? _jsx(Button, { size: "sm", variant: "outline", disabled: busy, onClick: onEnable, children: "\u542F\u7528" }) : null] }) : null, destroyable ? confirming ? (_jsxs("div", { "data-testid": "gateway-key-destroy-confirm", className: "mt-2 shrink-0 rounded-lg border border-destructive/40 bg-destructive/5 p-3 text-xs", children: [_jsxs("p", { className: "text-foreground", children: ["\u5220\u9664\u540E\uFF0C\u6B63\u5728\u4F7F\u7528\u8FD9\u628A\u5BC6\u94A5\u7684\u5BA2\u6237\u7AEF\u4F1A\u7ACB\u5373\u5931\u6548\u3002\u5DF2\u8BB0\u5F55\u7684\u5E94\u7528\uFF1A", binding.label, "\u3002"] }), _jsxs("div", { className: "mt-2 flex flex-wrap gap-2", children: [_jsx(Button, { variant: "secondary", size: "sm", className: "h-8 text-xs", "aria-label": `确认删除 ${label}`, disabled: busy, onClick: onDestroy, children: "\u786E\u8BA4\u5220\u9664" }), _jsx(Button, { variant: "ghost", size: "sm", className: "h-8 text-xs", "aria-label": `取消删除 ${label}`, disabled: busy, onClick: onCancelDestroy, children: "\u53D6\u6D88" })] })] })) : (_jsxs(Button, { variant: "ghost", size: "sm", className: "h-8 shrink-0 gap-1.5 text-xs text-muted-foreground hover:text-destructive", "aria-label": `销毁 ${label}`, title: `销毁 ${label}`, disabled: busy, onClick: onRequestDestroy, children: [_jsx(Trash2, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), "\u9500\u6BC1"] })) : (_jsx("span", { className: "shrink-0 text-xs text-muted-foreground", children: "\u7F3A\u5C11\u5BC6\u94A5\u6807\u8BC6\uFF0C\u65E0\u6CD5\u5728\u6B64\u9500\u6BC1" }))] }));
+    return (_jsxs("li", { "data-key-id": record.id, "data-key-binding": record.appliedTo ? 'bound' : 'unbound', className: "flex flex-wrap items-center gap-x-4 gap-y-2 border-b border-border/60 px-4 py-3 first:rounded-t-xl last:rounded-b-xl last:border-b-0", children: [_jsxs("dl", { className: "flex min-w-0 flex-1 basis-64 flex-wrap items-center gap-x-6 gap-y-2", children: [_jsx(KeyField, { label: "\u540D\u79F0", className: "min-w-0 flex-1 basis-28", children: _jsx("span", { className: "block truncate text-sm font-medium text-foreground/90", title: label, children: label }) }), _jsx(KeyField, { label: "\u5E94\u7528\u5230", className: "min-w-0 flex-1 basis-28", children: _jsxs("span", { className: "flex min-w-0 items-center gap-1.5 text-xs text-muted-foreground", children: [binding.clientId ? _jsx(AiClientIcon, { client: binding.clientId, className: "h-3.5 w-3.5" }) : null, _jsx("span", { className: "truncate", title: binding.label, children: binding.label })] }) }), _jsx(KeyField, { label: "\u6700\u540E\u4F7F\u7528", className: "shrink-0", children: _jsx("span", { className: "block text-xs text-muted-foreground", children: record.lastUsedAt ? formatTimestamp(record.lastUsedAt) : '暂无调用记录' }) }), _jsx(KeyField, { label: "\u8303\u56F4", children: _jsx("span", { className: "text-xs", children: "\u8303\u56F4\uFF1A\u6574\u4E2A Pod" }) }), record.appliedAt ? _jsx(KeyField, { label: "\u5199\u5165\u65F6\u95F4", children: _jsx("span", { className: "text-xs", children: formatTimestamp(record.appliedAt) }) }) : null] }), configurationStatus && (configurationStatus.status === 'unavailable' || (record.fingerprint && configurationStatus.appliedKeyFingerprint === record.fingerprint)) && configurationStatus.status !== 'configured' && configurationStatus.status !== 'notConfigured' ? (_jsx("p", { role: "status", className: "order-last w-full text-sm text-muted-foreground", children: configurationStatusLabel(configurationStatus.status) })) : null, onTest ? _jsx(Button, { variant: "outline", size: "sm", disabled: busy, onClick: onTest, children: testing ? '正在测试…' : '测试一次' }) : null, record.plaintextAvailable === false && onReissue ? _jsxs("div", { className: "order-last flex w-full flex-wrap items-center gap-2 text-xs text-muted-foreground", children: [_jsx("span", { children: "\u5BC6\u94A5\u539F\u6587\u6CA1\u6709\u4FDD\u5B58\uFF0C\u4E0D\u80FD\u518D\u663E\u793A" }), _jsx(Button, { variant: "ghost", size: "sm", disabled: busy, onClick: onReissue, children: "\u91CD\u65B0\u7B7E\u53D1" })] }) : null, record.disabledAt ? _jsxs("div", { className: "order-last flex w-full items-center gap-2 text-sm text-muted-foreground", children: ["\u5DF2\u505C\u7528", onEnable ? _jsx(Button, { size: "sm", variant: "outline", disabled: busy, onClick: onEnable, children: "\u542F\u7528" }) : null] }) : null, destroyable ? confirming ? (_jsxs("div", { "data-testid": "gateway-key-destroy-confirm", className: "mt-2 shrink-0 rounded-lg border border-destructive/40 bg-destructive/5 p-3 text-xs", children: [_jsxs("p", { className: "text-foreground", children: ["\u5220\u9664\u540E\uFF0C\u6B63\u5728\u4F7F\u7528\u8FD9\u628A\u5BC6\u94A5\u7684\u5BA2\u6237\u7AEF\u4F1A\u7ACB\u5373\u5931\u6548\u3002\u5DF2\u8BB0\u5F55\u7684\u5E94\u7528\uFF1A", binding.label, "\u3002"] }), _jsxs("div", { className: "mt-2 flex flex-wrap gap-2", children: [_jsx(Button, { variant: "secondary", size: "sm", className: "h-8 text-xs", "aria-label": `确认删除 ${label}`, disabled: busy, onClick: onDestroy, children: "\u786E\u8BA4\u5220\u9664" }), _jsx(Button, { variant: "ghost", size: "sm", className: "h-8 text-xs", "aria-label": `取消删除 ${label}`, disabled: busy, onClick: onCancelDestroy, children: "\u53D6\u6D88" })] })] })) : (_jsxs(Button, { variant: "ghost", size: "sm", className: "h-8 shrink-0 gap-1.5 text-xs text-muted-foreground hover:text-destructive", "aria-label": `销毁 ${label}`, title: `销毁 ${label}`, disabled: busy, onClick: onRequestDestroy, children: [_jsx(Trash2, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), "\u9500\u6BC1"] })) : (_jsx("span", { className: "shrink-0 text-xs text-muted-foreground", children: "\u7F3A\u5C11\u5BC6\u94A5\u6807\u8BC6\uFF0C\u65E0\u6CD5\u5728\u6B64\u9500\u6BC1" }))] }));
 }
 /** Where the credential is in effect: the client application and the device. */
 export function gatewayKeyBinding(record) {

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeysSection.js

@@ -1,6 +1,6 @@
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 import { useCallback, useEffect, useRef, useState } from 'react';
-import { Badge, Button, Dialog, DialogContent, DialogFooter, DialogHeader, DialogTitle, DialogTrigger, Input, NativeSelect, InlineNotice, SectionHeader, TooltipProvider, dismissToast, toast, } from '@undefineds.co/shared-ui';
+import { Badge, Button, Dialog, DialogContent, DialogFooter, DialogHeader, DialogTitle, DialogTrigger, Input, NativeSelect, InlineNotice, ListSurface, SectionHeader, TooltipProvider, dismissToast, toast, } from '@undefineds.co/shared-ui';
 import { Check, Loader2, Plus, Settings2 } from 'lucide-react';
 import { AI_CONNECTIONS_CLIENTS, AI_CLIENT_LABELS, manualConfigurationText, } from './AiClientConfigurationSection.js';
 import { aiConnectionsErrorMessage } from './error-wording.js';
@@ -27,10 +27,20 @@ const XPOD_CREDENTIAL_NOTE = '密钥允许客户端以你的 WebID 访问整个
  */
 export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigurationBridge, gatewayModels, modelSelection, liveRevision = 0, }) {
     const bridge = clientConfigurationBridge?.available === false ? undefined : clientConfigurationBridge;
+    const [busyKeyId, setBusyKeyId] = useState();
+    const operation = useRef(false);
+    const verificationGeneration = useRef(0);
+    const [sessionPlans, setSessionPlans] = useState({});
+    const [testingKeyId, setTestingKeyId] = useState();
     const [clientStatuses, setClientStatuses] = useState({});
     useEffect(() => {
         let active = true;
+        verificationGeneration.current += 1;
+        operation.current = false;
+        setBusyKeyId(undefined);
+        setTestingKeyId(undefined);
         setClientStatuses({});
+        setSessionPlans({});
         if (bridge) {
             for (const id of AI_CONNECTIONS_CLIENTS) {
                 void bridge.inspect(id).then((status) => {
@@ -39,8 +49,8 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
                 }).catch(() => undefined);
             }
         }
-        return () => { active = false; };
-    }, [bridge]);
+        return () => { active = false; verificationGeneration.current += 1; };
+    }, [bridge, client]);
     const [keys, setKeys] = useState([]);
     const [confirmingKeyId, setConfirmingKeyId] = useState(undefined);
     const [loadError, setLoadError] = useState();
@@ -57,10 +67,8 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
     const [issuedClient, setIssuedClient] = useState();
     const [appliedClient, setAppliedClient] = useState();
     const [applying, setApplying] = useState(false);
-    const [busyKeyId, setBusyKeyId] = useState();
     const [error, setError] = useState();
     const plaintexts = useRef(new Map());
-    const operation = useRef(false);
     const notification = useRef(undefined);
     const notify = useCallback((options) => {
         if (notification.current)
@@ -218,6 +226,7 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
                         targetHash: plan.confirmation.targetHash,
                     } } : {}),
             });
+            setSessionPlans(current => ({ ...current, [plan.client]: issued.fingerprint ? { planId: plan.planId, fingerprint: issued.fingerprint } : undefined }));
             setAppliedClient(plan.client);
             setClientStatuses((current) => ({ ...current, [plan.client]: { status: 'unverifiable', appliedKeyFingerprint: issued.fingerprint } }));
             // The record now points at the client the wrapper was written into.
@@ -235,6 +244,51 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
             setApplying(false);
         }
     };
+    const verificationPlan = (record) => {
+        const clientId = AI_CONNECTIONS_CLIENTS.find(id => id === record.appliedTo);
+        if (!bridge || !clientId || record.disabledAt || !record.fingerprint)
+            return;
+        const status = clientStatuses[clientId];
+        const plan = sessionPlans[clientId];
+        if (status?.status !== 'unverifiable' || status.appliedKeyFingerprint !== record.fingerprint || plan?.fingerprint !== record.fingerprint)
+            return;
+        return { clientId, ...plan };
+    };
+    const testConfiguration = async (record) => {
+        const plan = verificationPlan(record);
+        if (!bridge || !plan || operation.current)
+            return;
+        const generation = verificationGeneration.current;
+        operation.current = true;
+        setBusyKeyId(record.id);
+        setTestingKeyId(record.id);
+        try {
+            let status = await bridge.verify({ client: plan.clientId, planId: plan.planId });
+            if (generation !== verificationGeneration.current)
+                return;
+            if (status.status === 'configured' && !status.appliedKeyFingerprint) {
+                const inspected = await bridge.inspect(plan.clientId);
+                if (generation !== verificationGeneration.current)
+                    return;
+                status = { ...status, ...inspected };
+            }
+            const fingerprint = status.appliedKeyFingerprint ?? (status.status !== 'configured' ? plan.fingerprint : undefined);
+            if (fingerprint !== plan.fingerprint)
+                throw new Error('Configuration key changed');
+            setClientStatuses(current => ({ ...current, [plan.clientId]: { ...status, appliedKeyFingerprint: fingerprint } }));
+        }
+        catch {
+            if (generation === verificationGeneration.current)
+                notify({ variant: 'destructive', description: '客户端配置测试失败，请重试。', duration: 8000 });
+        }
+        finally {
+            if (generation === verificationGeneration.current) {
+                operation.current = false;
+                setBusyKeyId(undefined);
+                setTestingKeyId(undefined);
+            }
+        }
+    };
     const destroy = async (record) => {
         if (operation.current)
             return;
@@ -260,24 +314,24 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
         }
     };
     return (_jsx(TooltipProvider, { children: _jsx(Dialog, { open: showCreate, onOpenChange: (open) => { if (!open && (creating || applying))
-                return; setShowCreate(open); }, children: _jsxs("section", { className: "space-y-8", "aria-label": "Xpod \u5BC6\u94A5", children: [_jsx(AiProviderHeader, { name: "Xpod", mark: "XP", avatar: XPOD_AVATAR, infoLabel: "Xpod \u8BF4\u660E", infoLines: [XPOD_DESCRIPTION, XPOD_CREDENTIAL_NOTE], link: { href: client.apiBase, label: '访问 Xpod' }, badge: (_jsx(Badge, { variant: keys.length > 0 ? 'default' : 'secondary', children: keys.length > 0 ? `已签发 ${keys.length} 个` : '未配置' })) }), _jsxs("section", { className: "space-y-3", "aria-label": "\u5F53\u524D\u8FDE\u63A5", children: [_jsx(SectionHeader, { level: 3, title: _jsxs(_Fragment, { children: [_jsx(Settings2, { "aria-hidden": "true", className: "h-4 w-4 text-primary" }), "\u5F53\u524D\u8FDE\u63A5"] }), titleClassName: "flex items-center gap-2 font-medium text-foreground/90", actions: (_jsx(DialogTrigger, { asChild: true, children: _jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", "aria-label": "\u65B0\u5EFA Xpod \u5BC6\u94A5", disabled: creating || loading, onClick: openCreate, children: [_jsx(Plus, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), "Xpod \u5BC6\u94A5"] }) })) }), loadError ? _jsx(InlineNotice, { tone: "destructive", role: "alert", action: serviceAccessMissing && onAuthorizeService ? _jsx(Button, { size: "sm", disabled: authorizing, onClick: () => void authorize(), children: authorizing ? '正在授权…' : '允许 Xpod 访问' }) : undefined, children: loadError }) : null, loading ? (_jsxs("div", { className: "flex items-center gap-2 py-6 text-sm text-muted-foreground", children: [_jsx(Loader2, { "aria-hidden": "true", className: "h-4 w-4 animate-spin" }), "\u6B63\u5728\u8BFB\u53D6 Xpod \u5BC6\u94A5"] })) : loadError ? null : keys.length === 0 ? (_jsx("p", { className: "py-2 text-xs text-muted-foreground", children: "\u5C1A\u672A\u7B7E\u53D1 Xpod \u5BC6\u94A5" })) : (_jsx("ul", { "aria-label": "Xpod \u5BC6\u94A5 \u5217\u8868", className: "rounded-xl border border-border/70", children: keys.map((record) => (_jsx(AiGatewayKeyRow, { record: record, busy: Boolean(busyKeyId), confirming: confirmingKeyId === record.id, configurationStatus: record.appliedTo && AI_CONNECTIONS_CLIENTS.includes(record.appliedTo)
-                                        ? clientStatuses[record.appliedTo] : undefined, onEnable: () => {
-                                        if (operation.current)
-                                            return;
-                                        operation.current = true;
-                                        setBusyKeyId(record.id);
-                                        void client.updateGatewayKey(record.id, { enabled: true }).then((updated) => {
-                                            setKeys((current) => current.map((item) => item.id === record.id ? updated : item));
-                                        }).catch(notifyError).finally(() => { operation.current = false; setBusyKeyId(undefined); });
-                                    }, onReissue: () => {
-                                        beginAnother();
-                                        setName(record.name ?? DEFAULT_KEY_NAME);
-                                        setPurpose(AI_CONNECTIONS_CLIENTS.find((id) => id === record.appliedTo) ?? '');
-                                        setShowCreate(true);
-                                    }, onRequestDestroy: () => setConfirmingKeyId(record.id), onCancelDestroy: () => setConfirmingKeyId((current) => (current === record.id ? undefined : current)), onDestroy: () => {
-                                        setConfirmingKeyId(undefined);
-                                        void destroy(record);
-                                    } }, record.id))) }))] }), _jsx(AiGatewayModelsSection, { models: gatewayModels, selection: modelSelection }), _jsxs(DialogContent, { className: "sm:max-w-md", "aria-describedby": undefined, children: [_jsx(DialogHeader, { children: _jsx(DialogTitle, { children: issued ? 'Xpod 密钥 已签发' : '新建 Xpod 密钥' }) }), issued ? (_jsxs("div", { className: "space-y-5", children: [_jsxs("div", { className: "space-y-1.5", children: [_jsxs("p", { className: "text-sm", children: ["\u5DF2\u7B7E\u53D1\u300C", issued.name || '未命名 Xpod 密钥', "\u300D\uFF0C\u7528\u9014\uFF1A", issuedClient ? AI_CLIENT_LABELS[issuedClient] : '只复制', "\u3002"] }), _jsx("p", { className: "text-xs text-muted-foreground", children: "\u5BC6\u94A5\u53EA\u663E\u793A\u8FD9\u4E00\u6B21\uFF0C\u8BF7\u7ACB\u5373\u590D\u5236\u3002\u8303\u56F4\uFF1A\u6574\u4E2A Pod\u3002" })] }), issued.maskedHint ? (_jsx("code", { className: "block truncate rounded-md border border-border/60 bg-muted/30 px-3 py-2 font-mono text-xs text-muted-foreground", children: issued.maskedHint })) : null, _jsx(AiEndpointList, { endpoints: xpodProtocolEndpoints(client.apiBase), copy: true, display: "protocol" }), !bridge ? (_jsx("p", { className: "text-xs text-muted-foreground", children: "\u5F53\u524D Web \u73AF\u5883\u65E0\u6CD5\u81EA\u52A8\u5199\u5165\u5BA2\u6237\u7AEF\u914D\u7F6E\uFF0C\u8BF7\u590D\u5236\u540E\u624B\u52A8\u7C98\u8D34\uFF1B\u81EA\u52A8\u5E94\u7528\u9700\u8981\u672C\u673A\u8FDE\u63A5\u3002" })) : null, error ? _jsx("p", { role: "alert", className: "text-sm text-destructive", children: error }) : null, _jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx(AiCopyButton, { value: () => sessionPlaintext(issued, UNPERSISTED_COPY_MESSAGE), label: "Xpod \u5BC6\u94A5", text: "\u590D\u5236 Xpod \u5BC6\u94A5", disabled: applying, iconClassName: "mr-1.5 h-3.5 w-3.5", copiedIconClassName: "mr-1.5 h-3.5 w-3.5 text-emerald-600", onError: (cause) => setError(errorMessage(cause)) }), issuedClient ? _jsx(AiCopyButton, { value: () => manualConfigurationText(issuedClient, client.apiBase, sessionPlaintext(issued, UNPERSISTED_COPY_MESSAGE)), label: `${AI_CLIENT_LABELS[issuedClient]} 配置`, text: `复制 ${AI_CLIENT_LABELS[issuedClient]} 配置`, disabled: applying, iconClassName: "mr-1.5 h-3.5 w-3.5", copiedIconClassName: "mr-1.5 h-3.5 w-3.5 text-emerald-600", onError: (cause) => setError(errorMessage(cause)) }) : null, bridge && issuedClient ? (appliedClient ? (_jsxs("span", { role: "status", className: "inline-flex items-center gap-1 text-xs text-muted-foreground", children: [_jsx(Check, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), "\u5DF2\u5E94\u7528\u5230 ", AI_CLIENT_LABELS[appliedClient]] })) : (_jsxs(Button, { type: "button", size: "sm", disabled: applying || clientStatuses[issuedClient]?.status === 'unavailable', "aria-label": `写入 ${AI_CLIENT_LABELS[issuedClient]}`, onClick: () => void apply(), children: [applying ? _jsx(Loader2, { "aria-hidden": "true", className: "mr-2 h-4 w-4 animate-spin" }) : null, applying ? '正在应用…' : `写入 ${AI_CLIENT_LABELS[issuedClient]}`] }))) : null] }), _jsxs(DialogFooter, { children: [_jsx(Button, { type: "button", variant: "ghost", disabled: applying, onClick: beginAnother, children: "\u518D\u5EFA\u4E00\u4E2A" }), _jsx(Button, { type: "button", variant: "outline", onClick: () => setShowCreate(false), children: "\u5B8C\u6210" })] })] })) : (_jsxs("form", { className: "space-y-5", onSubmit: (event) => { event.preventDefault(); if (!creating)
+                return; setShowCreate(open); }, children: _jsxs("section", { className: "space-y-8", "aria-label": "Xpod \u5BC6\u94A5", children: [_jsx(AiProviderHeader, { name: "Xpod", mark: "XP", avatar: XPOD_AVATAR, infoLabel: "Xpod \u8BF4\u660E", infoLines: [XPOD_DESCRIPTION, XPOD_CREDENTIAL_NOTE], link: { href: client.apiBase, label: '访问 Xpod' }, badge: (_jsx(Badge, { variant: keys.length > 0 ? 'default' : 'secondary', children: keys.length > 0 ? `已签发 ${keys.length} 个` : '未配置' })) }), _jsxs("section", { className: "space-y-3", "aria-label": "\u5F53\u524D\u8FDE\u63A5", children: [_jsx(SectionHeader, { level: 3, title: _jsxs(_Fragment, { children: [_jsx(Settings2, { "aria-hidden": "true", className: "h-4 w-4 text-primary" }), "\u5F53\u524D\u8FDE\u63A5"] }), titleClassName: "flex items-center gap-2 font-medium text-foreground/90", actions: (_jsx(DialogTrigger, { asChild: true, children: _jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", "aria-label": "\u65B0\u5EFA Xpod \u5BC6\u94A5", disabled: creating || loading, onClick: openCreate, children: [_jsx(Plus, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), "Xpod \u5BC6\u94A5"] }) })) }), loadError ? _jsx(InlineNotice, { tone: "destructive", role: "alert", action: serviceAccessMissing && onAuthorizeService ? _jsx(Button, { size: "sm", disabled: authorizing, onClick: () => void authorize(), children: authorizing ? '正在授权…' : '允许 Xpod 访问' }) : undefined, children: loadError }) : null, loading ? (_jsxs("div", { className: "flex items-center gap-2 py-6 text-sm text-muted-foreground", children: [_jsx(Loader2, { "aria-hidden": "true", className: "h-4 w-4 animate-spin" }), "\u6B63\u5728\u8BFB\u53D6 Xpod \u5BC6\u94A5"] })) : loadError ? null : keys.length === 0 ? (_jsx("p", { className: "py-2 text-xs text-muted-foreground", children: "\u5C1A\u672A\u7B7E\u53D1 Xpod \u5BC6\u94A5" })) : (_jsx(ListSurface, { asChild: true, className: "divide-y-0 border-border/70 bg-transparent", children: _jsx("ul", { "aria-label": "Xpod \u5BC6\u94A5 \u5217\u8868", children: keys.map((record) => (_jsx(AiGatewayKeyRow, { record: record, busy: Boolean(busyKeyId), confirming: confirmingKeyId === record.id, configurationStatus: record.appliedTo && AI_CONNECTIONS_CLIENTS.includes(record.appliedTo)
+                                            ? clientStatuses[record.appliedTo] : undefined, onTest: verificationPlan(record) ? () => void testConfiguration(record) : undefined, testing: testingKeyId === record.id, onEnable: () => {
+                                            if (operation.current)
+                                                return;
+                                            operation.current = true;
+                                            setBusyKeyId(record.id);
+                                            void client.updateGatewayKey(record.id, { enabled: true }).then((updated) => {
+                                                setKeys((current) => current.map((item) => item.id === record.id ? updated : item));
+                                            }).catch(notifyError).finally(() => { operation.current = false; setBusyKeyId(undefined); });
+                                        }, onReissue: () => {
+                                            beginAnother();
+                                            setName(record.name ?? DEFAULT_KEY_NAME);
+                                            setPurpose(AI_CONNECTIONS_CLIENTS.find((id) => id === record.appliedTo) ?? '');
+                                            setShowCreate(true);
+                                        }, onRequestDestroy: () => setConfirmingKeyId(record.id), onCancelDestroy: () => setConfirmingKeyId((current) => (current === record.id ? undefined : current)), onDestroy: () => {
+                                            setConfirmingKeyId(undefined);
+                                            void destroy(record);
+                                        } }, record.id))) }) }))] }), _jsx(AiGatewayModelsSection, { models: gatewayModels, selection: modelSelection }), _jsxs(DialogContent, { className: "sm:max-w-md", "aria-describedby": undefined, children: [_jsx(DialogHeader, { children: _jsx(DialogTitle, { children: issued ? 'Xpod 密钥 已签发' : '新建 Xpod 密钥' }) }), issued ? (_jsxs("div", { className: "space-y-5", children: [_jsxs("div", { className: "space-y-1.5", children: [_jsxs("p", { className: "text-sm", children: ["\u5DF2\u7B7E\u53D1\u300C", issued.name || '未命名 Xpod 密钥', "\u300D\uFF0C\u7528\u9014\uFF1A", issuedClient ? AI_CLIENT_LABELS[issuedClient] : '只复制', "\u3002"] }), _jsx("p", { className: "text-xs text-muted-foreground", children: "\u5BC6\u94A5\u53EA\u663E\u793A\u8FD9\u4E00\u6B21\uFF0C\u8BF7\u7ACB\u5373\u590D\u5236\u3002\u8303\u56F4\uFF1A\u6574\u4E2A Pod\u3002" })] }), issued.maskedHint ? (_jsx("code", { className: "block truncate rounded-md border border-border/60 bg-muted/30 px-3 py-2 font-mono text-xs text-muted-foreground", children: issued.maskedHint })) : null, _jsx(AiEndpointList, { endpoints: xpodProtocolEndpoints(client.apiBase), copy: true, display: "protocol" }), !bridge ? (_jsx("p", { className: "text-xs text-muted-foreground", children: "\u5F53\u524D Web \u73AF\u5883\u65E0\u6CD5\u81EA\u52A8\u5199\u5165\u5BA2\u6237\u7AEF\u914D\u7F6E\uFF0C\u8BF7\u590D\u5236\u540E\u624B\u52A8\u7C98\u8D34\uFF1B\u81EA\u52A8\u5E94\u7528\u9700\u8981\u672C\u673A\u8FDE\u63A5\u3002" })) : null, error ? _jsx("p", { role: "alert", className: "text-sm text-destructive", children: error }) : null, _jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx(AiCopyButton, { value: () => sessionPlaintext(issued, UNPERSISTED_COPY_MESSAGE), label: "Xpod \u5BC6\u94A5", text: "\u590D\u5236 Xpod \u5BC6\u94A5", disabled: applying, iconClassName: "mr-1.5 h-3.5 w-3.5", copiedIconClassName: "mr-1.5 h-3.5 w-3.5 text-emerald-600", onError: (cause) => setError(errorMessage(cause)) }), issuedClient ? _jsx(AiCopyButton, { value: () => manualConfigurationText(issuedClient, client.apiBase, sessionPlaintext(issued, UNPERSISTED_COPY_MESSAGE)), label: `${AI_CLIENT_LABELS[issuedClient]} 配置`, text: `复制 ${AI_CLIENT_LABELS[issuedClient]} 配置`, disabled: applying, iconClassName: "mr-1.5 h-3.5 w-3.5", copiedIconClassName: "mr-1.5 h-3.5 w-3.5 text-emerald-600", onError: (cause) => setError(errorMessage(cause)) }) : null, bridge && issuedClient ? (appliedClient ? (_jsxs("span", { role: "status", className: "inline-flex items-center gap-1 text-xs text-muted-foreground", children: [_jsx(Check, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), "\u5DF2\u5E94\u7528\u5230 ", AI_CLIENT_LABELS[appliedClient]] })) : (_jsxs(Button, { type: "button", size: "sm", disabled: applying || clientStatuses[issuedClient]?.status === 'unavailable', "aria-label": `写入 ${AI_CLIENT_LABELS[issuedClient]}`, onClick: () => void apply(), children: [applying ? _jsx(Loader2, { "aria-hidden": "true", className: "mr-2 h-4 w-4 animate-spin" }) : null, applying ? '正在应用…' : `写入 ${AI_CLIENT_LABELS[issuedClient]}`] }))) : null] }), _jsxs(DialogFooter, { children: [_jsx(Button, { type: "button", variant: "ghost", disabled: applying, onClick: beginAnother, children: "\u518D\u5EFA\u4E00\u4E2A" }), _jsx(Button, { type: "button", variant: "outline", onClick: () => setShowCreate(false), children: "\u5B8C\u6210" })] })] })) : (_jsxs("form", { className: "space-y-5", onSubmit: (event) => { event.preventDefault(); if (!creating)
                                     void create(); }, children: [_jsxs("label", { className: "block space-y-2", children: [_jsx("span", { className: "text-sm font-medium", children: "\u540D\u79F0" }), _jsx(Input, { autoFocus: true, "aria-label": "Xpod \u5BC6\u94A5 \u540D\u79F0", value: name, disabled: creating, onChange: (event) => setName(event.target.value) })] }), _jsxs("label", { className: "block space-y-2", children: [_jsx("span", { className: "text-sm font-medium", children: "\u7ED9\u54EA\u4E2A\u5BA2\u6237\u7AEF\u7528" }), _jsxs(NativeSelect, { "aria-label": "Xpod \u5BC6\u94A5 \u7528\u9014", value: purpose, disabled: creating, onChange: (event) => setPurpose(event.target.value), children: [_jsx("option", { value: "", children: "\u4E0D\u5199\u5165\uFF0C\u53EA\u590D\u5236" }), AI_CONNECTIONS_CLIENTS.map((clientId) => (_jsxs("option", { value: clientId, children: [AI_CLIENT_LABELS[clientId], bridge ? (clientStatuses[clientId]?.status === 'unavailable' ? ' · 未安装' : clientStatuses[clientId] ? ' · 可配置' : ' · 检测中') : ' · 只复制配置'] }, clientId)))] })] }), _jsx("p", { className: "text-xs leading-normal text-muted-foreground", children: "\u5BA2\u6237\u7AEF\u9ED8\u8BA4\u8DDF\u968F Pod \u7684\u667A\u80FD\u6A21\u578B\u3002" }), error ? _jsx("p", { role: "alert", className: "text-sm text-destructive", children: error }) : null, _jsxs(DialogFooter, { children: [_jsx(Button, { type: "button", variant: "outline", disabled: creating, onClick: () => setShowCreate(false), children: "\u53D6\u6D88" }), _jsxs(Button, { type: "submit", "aria-label": "\u521B\u5EFA Xpod \u5BC6\u94A5", disabled: creating || !name.trim(), children: [creating ? _jsx(Loader2, { "aria-hidden": "true", className: "mr-2 h-4 w-4 animate-spin" }) : null, creating ? '正在创建…' : '创建 Xpod 密钥'] })] })] }))] })] }) }) }));
 }
 function errorMessage(error) {

package/node_modules/@undefineds.co/ai-connections/dist/AiProviderCard.d.ts

@@ -35,6 +35,7 @@ export declare function AiProviderCard({ definition, product, status, accountLab
     }) => Promise<void>;
     onCreateLocalCredential?: (offering: AiProviderOffering, method?: AiProviderAuthorizationMethod) => Promise<void>;
     onUpdateCredential?: (credential: AiProviderCredentialSummary, patch: {
+        apiKey?: string;
         label?: string;
         enabled?: boolean;
         priority?: number;