@undefineds.co/xpod 0.4.28 → 0.4.30

package/node_modules/@undefineds.co/ai-connections/dist/AiConnectionsPanel.js

@@ -1,5 +1,5 @@
 import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
-import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import { useCallback, useEffect, useRef, useState } from 'react';
 import { Toaster, toast, } from '@undefineds.co/shared-ui';
 import { PROVIDERS, } from './controller.js';
 import { aiConnectionsErrorMessage } from './error-wording.js';
@@ -10,17 +10,18 @@ import { AiGatewayKeysSection } from './AiGatewayKeysSection.js';
 import { credentialCarriers, withLiveCredentials } from './collections.js';
 import { modelCatalogId, withCatalogModelId } from './AiModelCatalog.js';
 const EMPTY_PROVIDER_SUMMARIES = {};
-export function AiConnectionsPanel({ client, onAuthorizeService, renderToaster = true, openExternal = openExternalUrl, clientConfigurationBridge, selectedSection = 'provider', selectedProvider, selectedCredentialId, providerSummaries: providerSummariesInput = EMPTY_PROVIDER_SUMMARIES, providerProducts = {}, providerLoadError, providerLoading = false, onProviderStateChange, onModelSelectionChange, liveRevision = 0, liveCredentialRows, }) {
-    const [connectionStates, setConnectionStates] = useState({});
+const EMPTY_PROVIDER_PRODUCTS = {};
+export function AiConnectionsPanel({ client, onAuthorizeService, renderToaster = true, developerMode = false, openExternal = openExternalUrl, clientConfigurationBridge, selectedSection = 'provider', selectedProvider, selectedCredentialId, providerSummaries: providerSummariesInput = EMPTY_PROVIDER_SUMMARIES, providerProducts = EMPTY_PROVIDER_PRODUCTS, providerLoadError, providerLoading = false, onProviderStateChange, onModelSelectionChange, liveRevision = 0, liveCredentialRows, }) {
+    const [connectionStates, setConnectionStates] = useState({ source: {}, states: {} });
     const [models, setModels] = useState([]);
-    const [gatewayModels, setGatewayModels] = useState();
+    const [gatewayCatalog, setGatewayCatalog] = useState();
     const [gatewayCatalogVersion, setGatewayCatalogVersion] = useState(0);
-    const [selectedModelIds, setSelectedModelIds] = useState({});
+    const [selectionOverrides, setSelectionOverrides] = useState(() => ({ source: providerProducts, ids: {} }));
     const [modelSelectionStatus, setModelSelectionStatus] = useState({});
     const [attempts, setAttempts] = useState({});
     const [attemptOfferingIds, setAttemptOfferingIds] = useState({});
     const [apiKeyInputs, setApiKeyInputs] = useState({});
-    const [baseUrlInputs, setBaseUrlInputs] = useState({});
+    const [baseUrlDrafts, setBaseUrlDrafts] = useState({ source: {}, values: {} });
     const [busyProviders, setBusyProviders] = useState({});
     const [providerErrors, setProviderErrors] = useState({});
     const [quotas, setQuotas] = useState({});
@@ -43,38 +44,43 @@ export function AiConnectionsPanel({ client, onAuthorizeService, renderToaster =
         ...providerProductOverrides,
     }, credentialCarriers(providerProducts, providerProductOverrides), liveCredentialRows);
     const updateConnectionState = useCallback((provider, state) => {
-        setConnectionStates((current) => ({ ...current, [provider]: state }));
+        setConnectionStates((current) => ({
+            // The override is bound to the summary it was raised against; a fresh
+            // summary for this provider (host fix or revoke) supersedes it, while a
+            // refresh of another provider leaves it untouched.
+            source: { ...current.source, [provider]: providerSummariesInput[provider] },
+            states: { ...current.states, [provider]: state },
+        }));
         onProviderStateChange?.(provider, productStateFromConnection(state));
-    }, [onProviderStateChange]);
-    useEffect(() => {
-        setConnectionStates(Object.fromEntries(Object.values(providerSummariesInput).filter(isDefined).map((summary) => [
-            summary.provider,
-            summary.status === 'connected' && summary.authMode === 'browserAssistedApiKey'
-                ? 'configured'
-                : summary.status,
-        ])));
-        setBaseUrlInputs(Object.fromEntries(Object.values(providerSummariesInput).filter(isDefined).map((summary) => [
-            summary.provider,
-            summary.baseUrl ?? '',
-        ])));
-    }, [providerSummariesInput]);
-    useEffect(() => {
-        setSelectedModelIds((current) => {
-            const next = { ...current };
-            let changed = false;
-            for (const [provider, product] of Object.entries(providerProducts)) {
-                if (!product)
-                    continue;
-                const ids = product.selectedModels.map(modelSelectionId);
-                const previous = current[provider];
-                if (!previous || previous.join('\u0000') !== ids.join('\u0000')) {
-                    next[provider] = ids;
-                    changed = true;
-                }
-            }
-            return changed ? next : current;
-        });
-    }, [providerProducts]);
+    }, [onProviderStateChange, providerSummariesInput]);
+    /**
+     * The connection state to render: a local pending/failed override while the
+     * summary it was raised against is still current, otherwise the summary's own
+     * projection.
+     */
+    const connectionStateFor = (provider) => {
+        const summary = providerSummariesInput[provider];
+        const local = connectionStates.source[provider] === summary
+            ? connectionStates.states[provider]
+            : undefined;
+        return local ?? summaryConnectionState(summary);
+    };
+    /**
+     * The Base URL a provider's input shows and its submit sends: a local draft
+     * while the summary it was typed against is still current, otherwise the
+     * summary's own endpoint. Both the field and `saveApiKey` share this so the
+     * displayed and submitted values cannot diverge.
+     */
+    const baseUrlFor = (provider) => {
+        const summary = providerSummariesInput[provider];
+        const draft = baseUrlDrafts.source[provider] === summary
+            ? baseUrlDrafts.values[provider]
+            : undefined;
+        return draft ?? summary?.baseUrl ?? '';
+    };
+    // Connection status, base URLs, and the model selection are projections of the
+    // props plus the user's local overrides; none of them is mirrored into state,
+    // so no effect has to copy props.
     useEffect(() => {
         let active = true;
         void client.listModels()
@@ -92,14 +98,21 @@ export function AiConnectionsPanel({ client, onAuthorizeService, renderToaster =
     }, [client, liveRevision]);
     useEffect(() => {
         let active = true;
-        setGatewayModels(undefined);
         // Load the routing projection independently: the host's listModels may be a Pod catalog.
         void client.listGatewayModels?.()
-            .then((availableModels) => { if (active)
-            setGatewayModels(availableModels); })
+            .then((availableModels) => {
+            if (active)
+                setGatewayCatalog({ client, version: gatewayCatalogVersion, models: availableModels });
+        })
             .catch(() => undefined);
         return () => { active = false; };
     }, [client, gatewayCatalogVersion]);
+    // A result is only current for the client + catalog revision it was loaded for;
+    // a stale response (or a not-yet-reloaded catalog) reads as undefined.
+    const gatewayModels = gatewayCatalog?.client === client
+        && gatewayCatalog.version === gatewayCatalogVersion
+        ? gatewayCatalog.models
+        : undefined;
     const setBusy = (provider, value) => {
         setBusyProviders((current) => ({ ...current, [provider]: value }));
     };
@@ -230,9 +243,7 @@ export function AiConnectionsPanel({ client, onAuthorizeService, renderToaster =
     };
     const saveApiKey = async (definition) => {
         const apiKey = apiKeyInputs[definition.id]?.trim();
-        const baseUrl = baseUrlInputs[definition.id]
-            ?? providerSummariesInput[definition.id]?.baseUrl
-            ?? '';
+        const baseUrl = baseUrlFor(definition.id);
         const attempt = attempts[definition.id];
         if (!apiKey || !attempt)
             return;
@@ -620,14 +631,34 @@ export function AiConnectionsPanel({ client, onAuthorizeService, renderToaster =
             setProviderError(provider, errorMessage(error));
         }
     };
-    const handleModelSelectionChange = useCallback((provider, modelIds) => {
-        const ids = [...new Set(modelIds)];
-        const previousIds = selectedModelIds[provider]
+    /**
+     * Selection ids a provider currently has, however they were last reported.
+     *
+     * The local override is only valid for the `providerProducts` snapshot it was
+     * written against; a host refresh supersedes it, so the projection always
+     * falls back to the authoritative product selection.
+     */
+    const selectionIdsFor = (provider) => {
+        const overrides = selectionOverrides.source === providerProducts ? selectionOverrides.ids : {};
+        return overrides[provider]
             ?? effectiveProviderProducts[provider]?.selectedModels.map(modelSelectionId)
             ?? [];
+    };
+    const setSelectionOverride = (provider, ids) => {
+        setSelectionOverrides((current) => ({
+            source: providerProducts,
+            ids: {
+                ...(current.source === providerProducts ? current.ids : {}),
+                [provider]: ids,
+            },
+        }));
+    };
+    const handleModelSelectionChange = (provider, modelIds) => {
+        const ids = [...new Set(modelIds)];
+        const previousIds = selectionIdsFor(provider);
         const generation = (modelSelectionGeneration.current[provider] ?? 0) + 1;
         modelSelectionGeneration.current[provider] = generation;
-        setSelectedModelIds((current) => ({ ...current, [provider]: ids }));
+        setSelectionOverride(provider, ids);
         setModelSelectionStatus((current) => ({ ...current, [provider]: 'saving' }));
         void (async () => {
             try {
@@ -657,16 +688,12 @@ export function AiConnectionsPanel({ client, onAuthorizeService, renderToaster =
                 if (modelSelectionGeneration.current[provider] !== generation)
                     return;
                 setModelSelectionStatus((current) => ({ ...current, [provider]: 'error' }));
-                setSelectedModelIds((current) => ({ ...current, [provider]: previousIds }));
+                setSelectionOverride(provider, previousIds);
                 onModelSelectionChange?.(provider, previousIds);
                 toast({ variant: 'destructive', description: errorMessage(error) });
             }
         })();
-    }, [client, effectiveProviderProducts, modelSelectionGeneration, models, onModelSelectionChange, selectedCredentialId, selectedModelIds]);
-    /** Selection ids a provider currently has, however they were last reported. */
-    const selectionIdsFor = useCallback((provider) => (selectedModelIds[provider]
-        ?? effectiveProviderProducts[provider]?.selectedModels.map(modelSelectionId)
-        ?? []), [selectedModelIds, effectiveProviderProducts]);
+    };
     /**
      * The key a gateway row is selected under.
      *
@@ -675,13 +702,13 @@ export function AiConnectionsPanel({ client, onAuthorizeService, renderToaster =
      * unequal against everything already stored and resolve to a resource the
      * write cannot find, so the row's own id is used whenever the account has one.
      */
-    const gatewaySelectionId = useCallback((model) => {
+    const gatewaySelectionId = (model) => {
         const stored = models.find((candidate) => candidate.provider === model.provider
             && modelCatalogId(candidate) === modelCatalogId(model));
         return stored ? modelSelectionId(stored) : modelSelectionId(model);
-    }, [models]);
+    };
     /** The gateway list switches the same selection the provider pages switch. */
-    const gatewayModelSelection = useMemo(() => ({
+    const gatewayModelSelection = {
         isSelected: (model) => selectionIdsFor(model.provider).includes(gatewaySelectionId(model)),
         toggle: (model) => {
             const current = selectionIdsFor(model.provider);
@@ -691,20 +718,18 @@ export function AiConnectionsPanel({ client, onAuthorizeService, renderToaster =
                 : [...current, selectionId]);
         },
         disabled: providerLoading,
-    }), [gatewaySelectionId, handleModelSelectionChange, providerLoading, selectionIdsFor]);
+    };
     const providerContent = (_jsxs("section", { children: [providerLoadError ? (_jsxs("p", { className: "mb-4 rounded-md border border-destructive/30 px-3 py-2 text-sm text-destructive", children: ["Provider \u72B6\u6001\u8BFB\u53D6\u5931\u8D25\uFF1A", providerLoadError] })) : null, PROVIDERS.filter((definition) => definition.id === (selectedProvider ?? 'openai')).map((definition) => {
                 const providerProduct = effectiveProviderProducts[definition.id];
                 const providerModels = mergeProviderModelCatalog(models.filter((model) => model.provider === definition.id
                     && (definition.id !== 'custom' || !selectedCredentialId || model.credentialId === selectedCredentialId)), providerProduct?.selectedModels ?? [], gatewayModels ?? []);
-                const providerSelectedModelIds = selectedModelIds[definition.id]
-                    ?? providerProduct?.selectedModels.map(modelSelectionId)
-                    ?? [];
-                return (_jsx(AiProviderCard, { definition: definition, product: providerProduct, status: resolvedConnectionState(connectionStates[definition.id], providerProduct), accountLabel: providerSummariesInput[definition.id]?.accountLabel, attempt: attempts[definition.id], attemptOfferingId: attemptOfferingIds[definition.id], apiKey: apiKeyInputs[definition.id] ?? '', baseUrl: baseUrlInputs[definition.id] ?? providerSummariesInput[definition.id]?.baseUrl ?? '', busy: Boolean(busyProviders[definition.id] || verifyingProviders[definition.id]), disabled: providerLoading, error: providerErrors[definition.id], quotas: quotas[definition.id], models: providerModels, selectedModelIds: providerSelectedModelIds, modelSelectionStatus: modelSelectionStatus[definition.id], onApiKeyChange: (value) => setApiKeyInputs((current) => ({
-                        ...current,
-                        [definition.id]: value,
-                    })), onBaseUrlChange: (value) => setBaseUrlInputs((current) => ({
+                const providerSelectedModelIds = selectionIdsFor(definition.id);
+                return (_jsx(AiProviderCard, { definition: definition, product: providerProduct, status: resolvedConnectionState(connectionStateFor(definition.id), providerProduct), accountLabel: providerSummariesInput[definition.id]?.accountLabel, attempt: attempts[definition.id], attemptOfferingId: attemptOfferingIds[definition.id], apiKey: apiKeyInputs[definition.id] ?? '', baseUrl: baseUrlFor(definition.id), busy: Boolean(busyProviders[definition.id] || verifyingProviders[definition.id]), disabled: providerLoading, developerMode: developerMode, error: providerErrors[definition.id], quotas: quotas[definition.id], models: providerModels, selectedModelIds: providerSelectedModelIds, modelSelectionStatus: modelSelectionStatus[definition.id], onApiKeyChange: (value) => setApiKeyInputs((current) => ({
                         ...current,
                         [definition.id]: value,
+                    })), onBaseUrlChange: (value) => setBaseUrlDrafts((current) => ({
+                        source: { ...current.source, [definition.id]: providerSummariesInput[definition.id] },
+                        values: { ...current.values, [definition.id]: value },
                     })), onBeginApiKey: () => void beginApiKey(definition.id), onBeginOffering: (offering, mode, method) => void beginOfferingConnect(definition.id, offering, mode, method), onCancelConnect: (attempt) => void cancelConnect(definition.id, attempt), onBeginBrowser: () => void beginBrowserConnect(definition), onSaveApiKey: () => void saveApiKey(definition), onDisconnect: (credential) => void disconnect(definition.id, credential?.id), onCreateApiKeyCredential: (offering, input) => createApiKeyCredential(definition.id, offering, input), onCreateLocalCredential: (offering, method) => createLocalCredential(definition.id, offering, method), onUpdateCredential: (credential, patch) => updateProviderCredential(definition.id, credential, patch), onDeleteCredential: (credential) => void deleteProviderCredential(definition.id, credential), onTestCredential: (credential) => void testProviderCredential(definition.id, credential), onReorderCredentials: (offering, credentials, fromIndex, toIndex) => void reorderProviderCredentials(definition.id, offering, credentials, fromIndex, toIndex), onRefreshQuota: (offering, credential) => void refreshQuota(definition.id, offering, credential), verifyPending: Boolean(verifyingProviders[definition.id]), onVerify: () => void verifyProvider(definition.id), onAddModel: () => openModelEditor(definition.id), onEditModel: (model) => openModelEditor(definition.id, model), onDeleteModel: (model) => void deleteProviderModel(definition.id, model), onModelSelectionChange: handleModelSelectionChange, onDismissError: () => setProviderError(definition.id) }, definition.id));
             })] }));
     const keyContent = (_jsx(AiGatewayKeysSection, { client: client, onAuthorizeService: onAuthorizeService, clientConfigurationBridge: clientConfigurationBridge, gatewayModels: gatewayModels, modelSelection: gatewayModelSelection, liveRevision: liveRevision }));
@@ -734,6 +759,13 @@ function connectionStateFromProduct(product) {
         ? 'connected'
         : 'configured';
 }
+function summaryConnectionState(summary) {
+    if (!summary)
+        return undefined;
+    return summary.status === 'connected' && summary.authMode === 'browserAssistedApiKey'
+        ? 'configured'
+        : summary.status;
+}
 function resolvedConnectionState(transientState, product) {
     if (transientState === 'pending' || transientState === 'failed')
         return transientState;
@@ -1043,6 +1075,3 @@ function compactModelSelection(model) {
         ...(model.resourceId ? { resourceId: model.resourceId } : {}),
     };
 }
-function isDefined(value) {
-    return value !== undefined;
-}

package/node_modules/@undefineds.co/ai-connections/dist/AiCredentialPoolSection.d.ts

@@ -17,7 +17,7 @@ export interface AiOfferingQuotaState {
  * dialog needs - which form is open, the busy state, the errors - belongs to
  * `useAiConnectDialog`, so the two views of that lifecycle stay in step.
  */
-export declare function AiCredentialPoolSection({ definition, product, status, accountLabel, attempt, attemptOfferingId, apiKey, baseUrl, busy, disabled, error, suppressError, quotas, onApiKeyChange, onBaseUrlChange, onBeginApiKey, onBeginOffering, onCancelConnect, onBeginBrowser, onSaveApiKey, onDisconnect, onCreateApiKeyCredential, onCreateLocalCredential, onUpdateCredential, onDeleteCredential, onTestCredential, onReorderCredentials, onRefreshQuota, onDismissError, }: {
+export declare function AiCredentialPoolSection({ definition, product, status, accountLabel, attempt, attemptOfferingId, apiKey, baseUrl, busy, disabled, developerMode, error, suppressError, quotas, onApiKeyChange, onBaseUrlChange, onBeginApiKey, onBeginOffering, onCancelConnect, onBeginBrowser, onSaveApiKey, onDisconnect, onCreateApiKeyCredential, onCreateLocalCredential, onUpdateCredential, onDeleteCredential, onTestCredential, onReorderCredentials, onRefreshQuota, onDismissError, }: {
     definition: AiProviderDefinition;
     product?: AiProviderSummary;
     status: ProviderConnectionState;
@@ -28,6 +28,7 @@ export declare function AiCredentialPoolSection({ definition, product, status, a
     baseUrl?: string;
     busy: boolean;
     disabled?: boolean;
+    developerMode?: boolean;
     error?: AiOfferingActionError;
     suppressError?: boolean;
     quotas?: Partial<Record<string, AiOfferingQuotaState>>;

package/node_modules/@undefineds.co/ai-connections/dist/AiCredentialPoolSection.js

@@ -16,7 +16,7 @@ import { useAiConnectDialog } from './useAiConnectDialog.js';
  * dialog needs - which form is open, the busy state, the errors - belongs to
  * `useAiConnectDialog`, so the two views of that lifecycle stay in step.
  */
-export function AiCredentialPoolSection({ definition, product, status, accountLabel, attempt, attemptOfferingId, apiKey, baseUrl = '', busy, disabled = false, error, suppressError = false, quotas = {}, onApiKeyChange, onBaseUrlChange, onBeginApiKey, onBeginOffering, onCancelConnect, onBeginBrowser, onSaveApiKey, onDisconnect, onCreateApiKeyCredential, onCreateLocalCredential, onUpdateCredential, onDeleteCredential, onTestCredential, onReorderCredentials, onRefreshQuota, onDismissError, }) {
+export function AiCredentialPoolSection({ definition, product, status, accountLabel, attempt, attemptOfferingId, apiKey, baseUrl = '', busy, disabled = false, developerMode = false, error, suppressError = false, quotas = {}, onApiKeyChange, onBaseUrlChange, onBeginApiKey, onBeginOffering, onCancelConnect, onBeginBrowser, onSaveApiKey, onDisconnect, onCreateApiKeyCredential, onCreateLocalCredential, onUpdateCredential, onDeleteCredential, onTestCredential, onReorderCredentials, onRefreshQuota, onDismissError, }) {
     const fallbackOfferings = [{
             id: 'api-platform',
             label: 'API Key',
@@ -69,7 +69,7 @@ export function AiCredentialPoolSection({ definition, product, status, accountLa
                                         || item.apiKeyMethod.lifecycle === 'unavailable'
                                         || (!product && status === 'pending' && !attempt), onClick: dialog.beginApiKey, children: [_jsx(Plus, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), item.apiKeyMethod.label] }, item.key));
                             })] }) }), offeringMethods.filter(({ offering, methods }) => offering.lifecycle === 'unavailable'
-                    && !methods.some((method) => method.lifecycle === 'active')).map(({ offering, methods }) => (_jsx(AiOfferingDetails, { offering: offering, methods: methods }, offering.id))), credentials.some((credential) => credential.enabled && (credential.health === 'expired' || credential.health === 'invalid' || credential.lastFailureCode === 'quota_exhausted')) ? _jsxs("p", { role: "status", className: "text-sm text-destructive", children: [credentials.length, " \u6761\u91CC\u6709 ", credentials.filter((credential) => credential.enabled && credential.health === 'healthy' && credential.lastFailureCode !== 'quota_exhausted').length, " \u6761\u5DF2\u9A8C\u8BC1\u53EF\u7528"] }) : null, credentials.some((credential) => credential.enabled && credential.lastFailureCode === 'upstream_unavailable') ?
+                    && !methods.some((method) => method.lifecycle === 'active')).map(({ offering, methods }) => (_jsx(AiOfferingDetails, { offering: offering, methods: methods, developerMode: developerMode }, offering.id))), credentials.some((credential) => credential.enabled && (credential.health === 'expired' || credential.health === 'invalid' || credential.lastFailureCode === 'quota_exhausted')) ? _jsxs("p", { role: "status", className: "text-sm text-destructive", children: [credentials.length, " \u6761\u91CC\u6709 ", credentials.filter((credential) => credential.enabled && credential.health === 'healthy' && credential.lastFailureCode !== 'quota_exhausted').length, " \u6761\u5DF2\u9A8C\u8BC1\u53EF\u7528"] }) : null, credentials.some((credential) => credential.enabled && credential.lastFailureCode === 'upstream_unavailable') ?
                     _jsx("p", { role: "status", className: "text-sm text-destructive", children: "\u8FDE\u63A5\u6682\u65F6\u4E0D\u53EF\u7528\uFF0C\u8BF7\u68C0\u67E5\u7F51\u7EDC\u6216\u7A0D\u540E\u91CD\u8BD5\u3002" }) : null, _jsxs("div", { "aria-label": "\u51ED\u636E\u5217\u8868", className: "space-y-2", children: [_jsx(AiSortableCredentialList, { credentials: orderedCredentials, disabled: busy || disabled, onMove: onReorderCredentials ? (from, to) => {
                                 const offering = offerings.find((item) => item.id === orderedCredentials[from]?.offeringId);
                                 if (offering)

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeyRow.d.ts

@@ -9,14 +9,13 @@ export interface AiGatewayKeyBinding {
  * carries only the purpose declared at creation, the client it was written
  * into, when it was last used, and the one action that still applies: destroy.
  */
-export declare function AiGatewayKeyRow({ record, busy, confirming, configurationStatus, onReissue, onEnable, onTest, testing, onRequestDestroy, onCancelDestroy, onDestroy, }: {
+export declare function AiGatewayKeyRow({ record, busy, confirming, configurationStatus, onReissue, onTest, testing, onRequestDestroy, onCancelDestroy, onDestroy, }: {
     record: GatewayKeyRecord;
     busy: boolean;
     /** §7.3：销毁前先说明影响，第二次点击才真正删除。 */
     confirming?: boolean;
     configurationStatus?: AiClientConfigurationStatus;
     onReissue?: () => void;
-    onEnable?: () => void;
     onTest?: () => void;
     testing?: boolean;
     onRequestDestroy: () => void;

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeyRow.js

@@ -7,14 +7,14 @@ import { AI_CLIENT_LABELS, AI_CONNECTIONS_CLIENTS, AiClientIcon, } from './AiCli
  * carries only the purpose declared at creation, the client it was written
  * into, when it was last used, and the one action that still applies: destroy.
  */
-export function AiGatewayKeyRow({ record, busy, confirming = false, configurationStatus, onReissue, onEnable, onTest, testing = false, onRequestDestroy, onCancelDestroy, onDestroy, }) {
+export function AiGatewayKeyRow({ record, busy, confirming = false, configurationStatus, onReissue, onTest, testing = false, onRequestDestroy, onCancelDestroy, onDestroy, }) {
     const label = record.name || '未命名 Xpod 密钥';
     const binding = gatewayKeyBinding(record);
     // Credentials issued through CSS are revoked by client id; a record without
     // one cannot be destroyed from here, so the row says so instead of offering
     // an action that always fails.
     const destroyable = record.kind !== 'client-credentials' || Boolean(record.clientCredentialId);
-    return (_jsxs("li", { "data-key-id": record.id, "data-key-binding": record.appliedTo ? 'bound' : 'unbound', className: "flex flex-wrap items-center gap-x-4 gap-y-2 border-b border-border/60 px-4 py-3 first:rounded-t-xl last:rounded-b-xl last:border-b-0", children: [_jsxs("dl", { className: "flex min-w-0 flex-1 basis-64 flex-wrap items-center gap-x-6 gap-y-2", children: [_jsx(KeyField, { label: "\u540D\u79F0", className: "min-w-0 flex-1 basis-28", children: _jsx("span", { className: "block truncate text-sm font-medium text-foreground/90", title: label, children: label }) }), _jsx(KeyField, { label: "\u5E94\u7528\u5230", className: "min-w-0 flex-1 basis-28", children: _jsxs("span", { className: "flex min-w-0 items-center gap-1.5 text-xs text-muted-foreground", children: [binding.clientId ? _jsx(AiClientIcon, { client: binding.clientId, className: "h-3.5 w-3.5" }) : null, _jsx("span", { className: "truncate", title: binding.label, children: binding.label })] }) }), _jsx(KeyField, { label: "\u6700\u540E\u4F7F\u7528", className: "shrink-0", children: _jsx("span", { className: "block text-xs text-muted-foreground", children: record.lastUsedAt ? formatTimestamp(record.lastUsedAt) : '暂无调用记录' }) }), _jsx(KeyField, { label: "\u8303\u56F4", children: _jsx("span", { className: "text-xs", children: "\u8303\u56F4\uFF1A\u6574\u4E2A Pod" }) }), record.appliedAt ? _jsx(KeyField, { label: "\u5199\u5165\u65F6\u95F4", children: _jsx("span", { className: "text-xs", children: formatTimestamp(record.appliedAt) }) }) : null] }), configurationStatus && (configurationStatus.status === 'unavailable' || (record.fingerprint && configurationStatus.appliedKeyFingerprint === record.fingerprint)) && configurationStatus.status !== 'configured' && configurationStatus.status !== 'notConfigured' ? (_jsx("p", { role: "status", className: "order-last w-full text-sm text-muted-foreground", children: configurationStatusLabel(configurationStatus.status) })) : null, onTest ? _jsx(Button, { variant: "outline", size: "sm", disabled: busy, onClick: onTest, children: testing ? '正在测试…' : '测试一次' }) : null, record.plaintextAvailable === false && onReissue ? _jsxs("div", { className: "order-last flex w-full flex-wrap items-center gap-2 text-xs text-muted-foreground", children: [_jsx("span", { children: "\u5BC6\u94A5\u539F\u6587\u6CA1\u6709\u4FDD\u5B58\uFF0C\u4E0D\u80FD\u518D\u663E\u793A" }), _jsx(Button, { variant: "ghost", size: "sm", disabled: busy, onClick: onReissue, children: "\u91CD\u65B0\u7B7E\u53D1" })] }) : null, record.disabledAt ? _jsxs("div", { className: "order-last flex w-full items-center gap-2 text-sm text-muted-foreground", children: ["\u5DF2\u505C\u7528", onEnable ? _jsx(Button, { size: "sm", variant: "outline", disabled: busy, onClick: onEnable, children: "\u542F\u7528" }) : null] }) : null, destroyable ? confirming ? (_jsxs("div", { "data-testid": "gateway-key-destroy-confirm", className: "mt-2 shrink-0 rounded-lg border border-destructive/40 bg-destructive/5 p-3 text-xs", children: [_jsxs("p", { className: "text-foreground", children: ["\u5220\u9664\u540E\uFF0C\u6B63\u5728\u4F7F\u7528\u8FD9\u628A\u5BC6\u94A5\u7684\u5BA2\u6237\u7AEF\u4F1A\u7ACB\u5373\u5931\u6548\u3002\u5DF2\u8BB0\u5F55\u7684\u5E94\u7528\uFF1A", binding.label, "\u3002"] }), _jsxs("div", { className: "mt-2 flex flex-wrap gap-2", children: [_jsx(Button, { variant: "secondary", size: "sm", className: "h-8 text-xs", "aria-label": `确认删除 ${label}`, disabled: busy, onClick: onDestroy, children: "\u786E\u8BA4\u5220\u9664" }), _jsx(Button, { variant: "ghost", size: "sm", className: "h-8 text-xs", "aria-label": `取消删除 ${label}`, disabled: busy, onClick: onCancelDestroy, children: "\u53D6\u6D88" })] })] })) : (_jsxs(Button, { variant: "ghost", size: "sm", className: "h-8 shrink-0 gap-1.5 text-xs text-muted-foreground hover:text-destructive", "aria-label": `销毁 ${label}`, title: `销毁 ${label}`, disabled: busy, onClick: onRequestDestroy, children: [_jsx(Trash2, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), "\u9500\u6BC1"] })) : (_jsx("span", { className: "shrink-0 text-xs text-muted-foreground", children: "\u7F3A\u5C11\u5BC6\u94A5\u6807\u8BC6\uFF0C\u65E0\u6CD5\u5728\u6B64\u9500\u6BC1" }))] }));
+    return (_jsxs("li", { "data-key-id": record.id, "data-key-binding": record.appliedTo ? 'bound' : 'unbound', className: "flex flex-wrap items-center gap-x-4 gap-y-2 border-b border-border/60 px-4 py-3 first:rounded-t-xl last:rounded-b-xl last:border-b-0", children: [_jsxs("dl", { className: "flex min-w-0 flex-1 basis-64 flex-wrap items-center gap-x-6 gap-y-2", children: [_jsx(KeyField, { label: "\u540D\u79F0", className: "min-w-0 flex-1 basis-28", children: _jsx("span", { className: "block truncate text-sm font-medium text-foreground/90", title: label, children: label }) }), _jsx(KeyField, { label: "\u5E94\u7528\u5230", className: "min-w-0 flex-1 basis-28", children: _jsxs("span", { className: "flex min-w-0 items-center gap-1.5 text-xs text-muted-foreground", children: [binding.clientId ? _jsx(AiClientIcon, { client: binding.clientId, className: "h-3.5 w-3.5" }) : null, _jsx("span", { className: "truncate", title: binding.label, children: binding.label })] }) }), _jsx(KeyField, { label: "\u6700\u540E\u4F7F\u7528", className: "shrink-0", children: _jsx("span", { className: "block text-xs text-muted-foreground", children: record.lastUsedAt ? formatTimestamp(record.lastUsedAt) : '暂无调用记录' }) }), _jsx(KeyField, { label: "\u8303\u56F4", children: _jsx("span", { className: "text-xs", children: "\u8303\u56F4\uFF1A\u6574\u4E2A Pod" }) }), record.appliedAt ? _jsx(KeyField, { label: "\u5199\u5165\u65F6\u95F4", children: _jsx("span", { className: "text-xs", children: formatTimestamp(record.appliedAt) }) }) : null] }), configurationStatus && (configurationStatus.status === 'unavailable' || (record.fingerprint && configurationStatus.appliedKeyFingerprint === record.fingerprint)) && configurationStatus.status !== 'configured' && configurationStatus.status !== 'notConfigured' ? (_jsx("p", { role: "status", className: "order-last w-full text-sm text-muted-foreground", children: configurationStatusLabel(configurationStatus.status) })) : null, onTest ? _jsx(Button, { variant: "outline", size: "sm", disabled: busy, onClick: onTest, children: testing ? '正在测试…' : '测试一次' }) : null, record.plaintextAvailable === false && onReissue ? _jsxs("div", { className: "order-last flex w-full flex-wrap items-center gap-2 text-xs text-muted-foreground", children: [_jsx("span", { children: "\u5BC6\u94A5\u539F\u6587\u6CA1\u6709\u4FDD\u5B58\uFF0C\u4E0D\u80FD\u518D\u663E\u793A" }), _jsx(Button, { variant: "ghost", size: "sm", disabled: busy, onClick: onReissue, children: "\u91CD\u65B0\u7B7E\u53D1" })] }) : null, destroyable ? confirming ? (_jsxs("div", { "data-testid": "gateway-key-destroy-confirm", className: "mt-2 shrink-0 rounded-lg border border-destructive/40 bg-destructive/5 p-3 text-xs", children: [_jsxs("p", { className: "text-foreground", children: ["\u5220\u9664\u540E\uFF0C\u6B63\u5728\u4F7F\u7528\u8FD9\u628A\u5BC6\u94A5\u7684\u5BA2\u6237\u7AEF\u4F1A\u7ACB\u5373\u5931\u6548\u3002\u5DF2\u8BB0\u5F55\u7684\u5E94\u7528\uFF1A", binding.label, "\u3002"] }), _jsxs("div", { className: "mt-2 flex flex-wrap gap-2", children: [_jsx(Button, { variant: "secondary", size: "sm", className: "h-8 text-xs", "aria-label": `确认删除 ${label}`, disabled: busy, onClick: onDestroy, children: "\u786E\u8BA4\u5220\u9664" }), _jsx(Button, { variant: "ghost", size: "sm", className: "h-8 text-xs", "aria-label": `取消删除 ${label}`, disabled: busy, onClick: onCancelDestroy, children: "\u53D6\u6D88" })] })] })) : (_jsxs(Button, { variant: "ghost", size: "sm", className: "h-8 shrink-0 gap-1.5 text-xs text-muted-foreground hover:text-destructive", "aria-label": `销毁 ${label}`, title: `销毁 ${label}`, disabled: busy, onClick: onRequestDestroy, children: [_jsx(Trash2, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), "\u9500\u6BC1"] })) : (_jsx("span", { className: "shrink-0 text-xs text-muted-foreground", children: "\u7F3A\u5C11\u5BC6\u94A5\u6807\u8BC6\uFF0C\u65E0\u6CD5\u5728\u6B64\u9500\u6BC1" }))] }));
 }
 /** Where the credential is in effect: the client application and the device. */
 export function gatewayKeyBinding(record) {

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeysSection.js

@@ -30,6 +30,16 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
     const [busyKeyId, setBusyKeyId] = useState();
     const operation = useRef(false);
     const verificationGeneration = useRef(0);
+    /**
+     * Where a key this session actually applied is in effect, and the digest it was applied with.
+     * The Account owns the credential but no application state, so a list refresh hands back a row
+     * without `appliedTo`; without this the plan that is still live would look like it was never
+     * written and lose its one test. Honoured only for the exact key id whose row still carries the
+     * matching digest, and dropped as soon as the Account stops listing the key, so a changed,
+     * reissued or deleted credential never inherits another key's application. Session-local: it is
+     * only ever a ref, never persisted and never sent anywhere.
+     */
+    const appliedObservations = useRef(new Map());
     const [sessionPlans, setSessionPlans] = useState({});
     const [testingKeyId, setTestingKeyId] = useState();
     const [clientStatuses, setClientStatuses] = useState({});
@@ -41,6 +51,8 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
         setTestingKeyId(undefined);
         setClientStatuses({});
         setSessionPlans({});
+        // A new client or bridge is a new session: no application observed under the old one carries.
+        appliedObservations.current.clear();
         if (bridge) {
             for (const id of AI_CONNECTIONS_CLIENTS) {
                 void bridge.inspect(id).then((status) => {
@@ -78,6 +90,29 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
     const notifyError = useCallback((cause) => {
         notify({ variant: 'destructive', description: errorMessage(cause), duration: 8000 });
     }, [notify]);
+    /**
+     * Rows as this session should show them: a revoked key is gone, and a key
+     * whose wrapper this session still holds is not advertised as unrecoverable.
+     * The Account remains the only store; this is a view decision.
+     */
+    const adoptRecords = useCallback((records) => {
+        // A key the Account no longer lists is gone: the session observation for it is not kept to be
+        // handed back if the same id ever reappears, because that would be inventing application state.
+        const listed = new Set(records.map((record) => record.id));
+        for (const id of [...appliedObservations.current.keys()]) {
+            if (!listed.has(id))
+                appliedObservations.current.delete(id);
+        }
+        return records
+            .filter((record) => !record.revokedAt)
+            .map((record) => {
+            const observed = record.appliedTo ? undefined : appliedObservations.current.get(record.id);
+            const restored = observed && record.fingerprint !== undefined && observed.fingerprint === record.fingerprint
+                ? { ...record, appliedTo: observed.appliedTo }
+                : record;
+            return plaintexts.current.has(record.id) ? { ...restored, plaintextAvailable: undefined } : restored;
+        });
+    }, []);
     useEffect(() => {
         let active = true;
         setLoading(true);
@@ -90,14 +125,11 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
         void client.listGatewayKeys()
             .then((records) => {
             if (active)
-                setKeys(records.filter((record) => !record.revokedAt));
+                setKeys(adoptRecords(records));
         })
             .catch((cause) => {
-            if (active) {
-                const missing = Boolean(cause && typeof cause === 'object' && 'code' in cause && cause.code === 'service_access_missing');
-                setLoadError(missing ? 'Xpod 尚未获准访问这个 Pod' : aiConnectionsErrorMessage(cause));
-                setServiceAccessMissing(missing);
-            }
+            if (active)
+                setLoadError(aiConnectionsErrorMessage(cause));
         })
             .finally(() => {
             if (active)
@@ -108,7 +140,23 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
             if (notification.current)
                 dismissToast(notification.current);
         };
-    }, [client, notifyError]);
+    }, [client, notifyError, adoptRecords]);
+    // The keys themselves are Account-owned and load without any Pod permission,
+    // but a key is only usable while Xpod may read the Pod, so the page still
+    // says so instead of letting an unusable list look healthy.
+    useEffect(() => {
+        if (!onAuthorizeService)
+            return;
+        let active = true;
+        void client.getServiceAccess()
+            .then(() => { if (active)
+            setServiceAccessMissing(false); })
+            .catch((cause) => {
+            if (active && errorCode(cause) === 'service_access_missing')
+                setServiceAccessMissing(true);
+        });
+        return () => { active = false; };
+    }, [client, onAuthorizeService, liveRevision]);
     // A change made elsewhere only needs new rows: it must not drop the wrapper
     // copies this session is still showing, nor flash the loading state.
     useEffect(() => {
@@ -118,13 +166,13 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
         void client.listGatewayKeys()
             .then((records) => {
             if (active)
-                setKeys(records.filter((record) => !record.revokedAt));
+                setKeys(adoptRecords(records));
         })
             .catch(() => undefined);
         return () => {
             active = false;
         };
-    }, [client, liveRevision]);
+    }, [client, liveRevision, adoptRecords]);
     const authorize = async () => {
         if (!onAuthorizeService || authorizing)
             return;
@@ -132,7 +180,7 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
         try {
             await onAuthorizeService();
             const records = await client.listGatewayKeys();
-            setKeys(records.filter((record) => !record.revokedAt));
+            setKeys(adoptRecords(records));
             setLoadError(undefined);
             setServiceAccessMissing(false);
         }
@@ -228,6 +276,11 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
             });
             setSessionPlans(current => ({ ...current, [plan.client]: issued.fingerprint ? { planId: plan.planId, fingerprint: issued.fingerprint } : undefined }));
             setAppliedClient(plan.client);
+            // Only a successful apply records where the key is in effect; a list refresh afterwards
+            // restores this row's binding from here instead of losing it with the Account rows.
+            if (issued.fingerprint) {
+                appliedObservations.current.set(issued.id, { appliedTo: plan.client, fingerprint: issued.fingerprint });
+            }
             setClientStatuses((current) => ({ ...current, [plan.client]: { status: 'unverifiable', appliedKeyFingerprint: issued.fingerprint } }));
             // The record now points at the client the wrapper was written into.
             setKeys((current) => current.map((record) => record.id === issued.id
@@ -272,10 +325,17 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
                     return;
                 status = { ...status, ...inspected };
             }
-            const fingerprint = status.appliedKeyFingerprint ?? (status.status !== 'configured' ? plan.fingerprint : undefined);
-            if (fingerprint !== plan.fingerprint)
+            const reported = status.appliedKeyFingerprint;
+            // Only a digest the host actually reports as *different* proves the
+            // applied key changed. A host that reports nothing leaves the key
+            // unproven; it must never read as "changed" or as verified.
+            if (reported !== undefined && reported !== plan.fingerprint)
                 throw new Error('Configuration key changed');
-            setClientStatuses(current => ({ ...current, [plan.clientId]: { ...status, appliedKeyFingerprint: fingerprint } }));
+            setClientStatuses(current => ({ ...current, [plan.clientId]: {
+                    ...status,
+                    ...(reported ? {} : { status: 'unverifiable' }),
+                    appliedKeyFingerprint: reported ?? plan.fingerprint,
+                } }));
         }
         catch {
             if (generation === verificationGeneration.current)
@@ -298,6 +358,7 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
         try {
             await client.deleteGatewayKey(record.id);
             plaintexts.current.delete(record.id);
+            appliedObservations.current.delete(record.id);
             setKeys((current) => current.filter((item) => item.id !== record.id));
             if (issued?.id === record.id) {
                 setIssued(undefined);
@@ -314,16 +375,8 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
         }
     };
     return (_jsx(TooltipProvider, { children: _jsx(Dialog, { open: showCreate, onOpenChange: (open) => { if (!open && (creating || applying))
-                return; setShowCreate(open); }, children: _jsxs("section", { className: "space-y-8", "aria-label": "Xpod \u5BC6\u94A5", children: [_jsx(AiProviderHeader, { name: "Xpod", mark: "XP", avatar: XPOD_AVATAR, infoLabel: "Xpod \u8BF4\u660E", infoLines: [XPOD_DESCRIPTION, XPOD_CREDENTIAL_NOTE], link: { href: client.apiBase, label: '访问 Xpod' }, badge: (_jsx(Badge, { variant: keys.length > 0 ? 'default' : 'secondary', children: keys.length > 0 ? `已签发 ${keys.length} 个` : '未配置' })) }), _jsxs("section", { className: "space-y-3", "aria-label": "\u5F53\u524D\u8FDE\u63A5", children: [_jsx(SectionHeader, { level: 3, title: _jsxs(_Fragment, { children: [_jsx(Settings2, { "aria-hidden": "true", className: "h-4 w-4 text-primary" }), "\u5F53\u524D\u8FDE\u63A5"] }), titleClassName: "flex items-center gap-2 font-medium text-foreground/90", actions: (_jsx(DialogTrigger, { asChild: true, children: _jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", "aria-label": "\u65B0\u5EFA Xpod \u5BC6\u94A5", disabled: creating || loading, onClick: openCreate, children: [_jsx(Plus, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), "Xpod \u5BC6\u94A5"] }) })) }), loadError ? _jsx(InlineNotice, { tone: "destructive", role: "alert", action: serviceAccessMissing && onAuthorizeService ? _jsx(Button, { size: "sm", disabled: authorizing, onClick: () => void authorize(), children: authorizing ? '正在授权…' : '允许 Xpod 访问' }) : undefined, children: loadError }) : null, loading ? (_jsxs("div", { className: "flex items-center gap-2 py-6 text-sm text-muted-foreground", children: [_jsx(Loader2, { "aria-hidden": "true", className: "h-4 w-4 animate-spin" }), "\u6B63\u5728\u8BFB\u53D6 Xpod \u5BC6\u94A5"] })) : loadError ? null : keys.length === 0 ? (_jsx("p", { className: "py-2 text-xs text-muted-foreground", children: "\u5C1A\u672A\u7B7E\u53D1 Xpod \u5BC6\u94A5" })) : (_jsx(ListSurface, { asChild: true, className: "divide-y-0 border-border/70 bg-transparent", children: _jsx("ul", { "aria-label": "Xpod \u5BC6\u94A5 \u5217\u8868", children: keys.map((record) => (_jsx(AiGatewayKeyRow, { record: record, busy: Boolean(busyKeyId), confirming: confirmingKeyId === record.id, configurationStatus: record.appliedTo && AI_CONNECTIONS_CLIENTS.includes(record.appliedTo)
-                                            ? clientStatuses[record.appliedTo] : undefined, onTest: verificationPlan(record) ? () => void testConfiguration(record) : undefined, testing: testingKeyId === record.id, onEnable: () => {
-                                            if (operation.current)
-                                                return;
-                                            operation.current = true;
-                                            setBusyKeyId(record.id);
-                                            void client.updateGatewayKey(record.id, { enabled: true }).then((updated) => {
-                                                setKeys((current) => current.map((item) => item.id === record.id ? updated : item));
-                                            }).catch(notifyError).finally(() => { operation.current = false; setBusyKeyId(undefined); });
-                                        }, onReissue: () => {
+                return; setShowCreate(open); }, children: _jsxs("section", { className: "space-y-8", "aria-label": "Xpod \u5BC6\u94A5", children: [_jsx(AiProviderHeader, { name: "Xpod", mark: "XP", avatar: XPOD_AVATAR, infoLabel: "Xpod \u8BF4\u660E", infoLines: [XPOD_DESCRIPTION, XPOD_CREDENTIAL_NOTE], link: { href: client.apiBase, label: '访问 Xpod' }, badge: (_jsx(Badge, { variant: keys.length > 0 ? 'default' : 'secondary', children: keys.length > 0 ? `已签发 ${keys.length} 个` : '未配置' })) }), _jsxs("section", { className: "space-y-3", "aria-label": "\u5F53\u524D\u8FDE\u63A5", children: [_jsx(SectionHeader, { level: 3, title: _jsxs(_Fragment, { children: [_jsx(Settings2, { "aria-hidden": "true", className: "h-4 w-4 text-primary" }), "\u5F53\u524D\u8FDE\u63A5"] }), titleClassName: "flex items-center gap-2 font-medium text-foreground/90", actions: (_jsx(DialogTrigger, { asChild: true, children: _jsxs(Button, { variant: "outline", size: "sm", className: "h-8 gap-1.5 text-xs", "aria-label": "\u65B0\u5EFA Xpod \u5BC6\u94A5", disabled: creating || loading, onClick: openCreate, children: [_jsx(Plus, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), "Xpod \u5BC6\u94A5"] }) })) }), loadError || serviceAccessMissing ? _jsx(InlineNotice, { tone: "destructive", role: "alert", action: serviceAccessMissing && onAuthorizeService ? _jsx(Button, { size: "sm", disabled: authorizing, onClick: () => void authorize(), children: authorizing ? '正在授权…' : '允许 Xpod 访问' }) : undefined, children: loadError ?? 'Xpod 尚未获准访问这个 Pod' }) : null, loading ? (_jsxs("div", { className: "flex items-center gap-2 py-6 text-sm text-muted-foreground", children: [_jsx(Loader2, { "aria-hidden": "true", className: "h-4 w-4 animate-spin" }), "\u6B63\u5728\u8BFB\u53D6 Xpod \u5BC6\u94A5"] })) : loadError ? null : keys.length === 0 ? (_jsx("p", { className: "py-2 text-xs text-muted-foreground", children: "\u5C1A\u672A\u7B7E\u53D1 Xpod \u5BC6\u94A5" })) : (_jsx(ListSurface, { asChild: true, className: "divide-y-0 border-border/70 bg-transparent", children: _jsx("ul", { "aria-label": "Xpod \u5BC6\u94A5 \u5217\u8868", children: keys.map((record) => (_jsx(AiGatewayKeyRow, { record: record, busy: Boolean(busyKeyId), confirming: confirmingKeyId === record.id, configurationStatus: record.appliedTo && AI_CONNECTIONS_CLIENTS.includes(record.appliedTo)
+                                            ? clientStatuses[record.appliedTo] : undefined, onTest: verificationPlan(record) ? () => void testConfiguration(record) : undefined, testing: testingKeyId === record.id, onReissue: () => {
                                             beginAnother();
                                             setName(record.name ?? DEFAULT_KEY_NAME);
                                             setPurpose(AI_CONNECTIONS_CLIENTS.find((id) => id === record.appliedTo) ?? '');
@@ -334,6 +387,11 @@ export function AiGatewayKeysSection({ client, onAuthorizeService, clientConfigu
                                         } }, record.id))) }) }))] }), _jsx(AiGatewayModelsSection, { models: gatewayModels, selection: modelSelection }), _jsxs(DialogContent, { className: "sm:max-w-md", "aria-describedby": undefined, children: [_jsx(DialogHeader, { children: _jsx(DialogTitle, { children: issued ? 'Xpod 密钥 已签发' : '新建 Xpod 密钥' }) }), issued ? (_jsxs("div", { className: "space-y-5", children: [_jsxs("div", { className: "space-y-1.5", children: [_jsxs("p", { className: "text-sm", children: ["\u5DF2\u7B7E\u53D1\u300C", issued.name || '未命名 Xpod 密钥', "\u300D\uFF0C\u7528\u9014\uFF1A", issuedClient ? AI_CLIENT_LABELS[issuedClient] : '只复制', "\u3002"] }), _jsx("p", { className: "text-xs text-muted-foreground", children: "\u5BC6\u94A5\u53EA\u663E\u793A\u8FD9\u4E00\u6B21\uFF0C\u8BF7\u7ACB\u5373\u590D\u5236\u3002\u8303\u56F4\uFF1A\u6574\u4E2A Pod\u3002" })] }), issued.maskedHint ? (_jsx("code", { className: "block truncate rounded-md border border-border/60 bg-muted/30 px-3 py-2 font-mono text-xs text-muted-foreground", children: issued.maskedHint })) : null, _jsx(AiEndpointList, { endpoints: xpodProtocolEndpoints(client.apiBase), copy: true, display: "protocol" }), !bridge ? (_jsx("p", { className: "text-xs text-muted-foreground", children: "\u5F53\u524D Web \u73AF\u5883\u65E0\u6CD5\u81EA\u52A8\u5199\u5165\u5BA2\u6237\u7AEF\u914D\u7F6E\uFF0C\u8BF7\u590D\u5236\u540E\u624B\u52A8\u7C98\u8D34\uFF1B\u81EA\u52A8\u5E94\u7528\u9700\u8981\u672C\u673A\u8FDE\u63A5\u3002" })) : null, error ? _jsx("p", { role: "alert", className: "text-sm text-destructive", children: error }) : null, _jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx(AiCopyButton, { value: () => sessionPlaintext(issued, UNPERSISTED_COPY_MESSAGE), label: "Xpod \u5BC6\u94A5", text: "\u590D\u5236 Xpod \u5BC6\u94A5", disabled: applying, iconClassName: "mr-1.5 h-3.5 w-3.5", copiedIconClassName: "mr-1.5 h-3.5 w-3.5 text-emerald-600", onError: (cause) => setError(errorMessage(cause)) }), issuedClient ? _jsx(AiCopyButton, { value: () => manualConfigurationText(issuedClient, client.apiBase, sessionPlaintext(issued, UNPERSISTED_COPY_MESSAGE)), label: `${AI_CLIENT_LABELS[issuedClient]} 配置`, text: `复制 ${AI_CLIENT_LABELS[issuedClient]} 配置`, disabled: applying, iconClassName: "mr-1.5 h-3.5 w-3.5", copiedIconClassName: "mr-1.5 h-3.5 w-3.5 text-emerald-600", onError: (cause) => setError(errorMessage(cause)) }) : null, bridge && issuedClient ? (appliedClient ? (_jsxs("span", { role: "status", className: "inline-flex items-center gap-1 text-xs text-muted-foreground", children: [_jsx(Check, { "aria-hidden": "true", className: "h-3.5 w-3.5" }), "\u5DF2\u5E94\u7528\u5230 ", AI_CLIENT_LABELS[appliedClient]] })) : (_jsxs(Button, { type: "button", size: "sm", disabled: applying || clientStatuses[issuedClient]?.status === 'unavailable', "aria-label": `写入 ${AI_CLIENT_LABELS[issuedClient]}`, onClick: () => void apply(), children: [applying ? _jsx(Loader2, { "aria-hidden": "true", className: "mr-2 h-4 w-4 animate-spin" }) : null, applying ? '正在应用…' : `写入 ${AI_CLIENT_LABELS[issuedClient]}`] }))) : null] }), _jsxs(DialogFooter, { children: [_jsx(Button, { type: "button", variant: "ghost", disabled: applying, onClick: beginAnother, children: "\u518D\u5EFA\u4E00\u4E2A" }), _jsx(Button, { type: "button", variant: "outline", onClick: () => setShowCreate(false), children: "\u5B8C\u6210" })] })] })) : (_jsxs("form", { className: "space-y-5", onSubmit: (event) => { event.preventDefault(); if (!creating)
                                     void create(); }, children: [_jsxs("label", { className: "block space-y-2", children: [_jsx("span", { className: "text-sm font-medium", children: "\u540D\u79F0" }), _jsx(Input, { autoFocus: true, "aria-label": "Xpod \u5BC6\u94A5 \u540D\u79F0", value: name, disabled: creating, onChange: (event) => setName(event.target.value) })] }), _jsxs("label", { className: "block space-y-2", children: [_jsx("span", { className: "text-sm font-medium", children: "\u7ED9\u54EA\u4E2A\u5BA2\u6237\u7AEF\u7528" }), _jsxs(NativeSelect, { "aria-label": "Xpod \u5BC6\u94A5 \u7528\u9014", value: purpose, disabled: creating, onChange: (event) => setPurpose(event.target.value), children: [_jsx("option", { value: "", children: "\u4E0D\u5199\u5165\uFF0C\u53EA\u590D\u5236" }), AI_CONNECTIONS_CLIENTS.map((clientId) => (_jsxs("option", { value: clientId, children: [AI_CLIENT_LABELS[clientId], bridge ? (clientStatuses[clientId]?.status === 'unavailable' ? ' · 未安装' : clientStatuses[clientId] ? ' · 可配置' : ' · 检测中') : ' · 只复制配置'] }, clientId)))] })] }), _jsx("p", { className: "text-xs leading-normal text-muted-foreground", children: "\u5BA2\u6237\u7AEF\u9ED8\u8BA4\u8DDF\u968F Pod \u7684\u667A\u80FD\u6A21\u578B\u3002" }), error ? _jsx("p", { role: "alert", className: "text-sm text-destructive", children: error }) : null, _jsxs(DialogFooter, { children: [_jsx(Button, { type: "button", variant: "outline", disabled: creating, onClick: () => setShowCreate(false), children: "\u53D6\u6D88" }), _jsxs(Button, { type: "submit", "aria-label": "\u521B\u5EFA Xpod \u5BC6\u94A5", disabled: creating || !name.trim(), children: [creating ? _jsx(Loader2, { "aria-hidden": "true", className: "mr-2 h-4 w-4 animate-spin" }) : null, creating ? '正在创建…' : '创建 Xpod 密钥'] })] })] }))] })] }) }) }));
 }
+function errorCode(error) {
+    return error && typeof error === 'object' && 'code' in error && typeof error.code === 'string'
+        ? error.code
+        : undefined;
+}
 function errorMessage(error) {
     if (error && typeof error === 'object' && 'code' in error && error.code === 'verification_failed_restored')
         return '写入失败，原配置已恢复';

package/node_modules/@undefineds.co/ai-connections/dist/AiOfferingDetails.d.ts

@@ -1,5 +1,6 @@
 import type { AiProviderAuthorizationMethod, AiProviderOffering } from './contract/ai-connections-client.js';
-export declare function AiOfferingDetails({ offering, methods }: {
+export declare function AiOfferingDetails({ offering, methods, developerMode }: {
     offering: AiProviderOffering;
     methods?: AiProviderAuthorizationMethod[];
+    developerMode?: boolean;
 }): import("react").JSX.Element;

package/node_modules/@undefineds.co/ai-connections/dist/AiOfferingDetails.js

@@ -2,12 +2,12 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { authMethodLabel, offeringKindLabel, offeringTitle, offeringUnavailableMessage } from './offering-label.js';
 import { authorizationMethodsForOffering } from './authorization-methods.js';
 import { AiEndpointList } from './AiEndpointList.js';
-export function AiOfferingDetails({ offering, methods }) {
+export function AiOfferingDetails({ offering, methods, developerMode = false }) {
     const endpoints = offering.endpoints ?? [];
     const title = offeringTitle(offering);
     const kindLabel = offering.kind ? offeringKindLabel(offering.kind) : undefined;
     const subtitle = kindLabel && kindLabel !== title ? [kindLabel] : [];
-    return (_jsxs("section", { className: "space-y-2", "aria-labelledby": `offering-${offering.id}`, children: [_jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { children: [_jsx("h4", { id: `offering-${offering.id}`, className: "text-sm font-medium text-foreground", children: title }), subtitle.length ? (_jsx("div", { className: "mt-1 flex items-center gap-2 text-xs text-muted-foreground", children: subtitle.map((part) => _jsx("span", { children: part }, part)) })) : null] }), _jsxs("div", { className: "flex flex-wrap items-center justify-end gap-x-3 gap-y-1 text-xs", children: [_jsx("span", { className: "text-muted-foreground", children: authMethodLabel(offering, methods) }), offering.consoleUrl ? _jsx(OfferingLink, { href: offering.consoleUrl, label: "\u63A7\u5236\u53F0" }) : null, offering.subscriptionUrl ? _jsx(OfferingLink, { href: offering.subscriptionUrl, label: "\u8BA2\u9605\u4E0E\u8D26\u5355" }) : null, offering.quota?.url ? _jsx(OfferingLink, { href: offering.quota.url, label: "\u989D\u5EA6\u4E0E\u7528\u91CF" }) : null, offering.usagePolicyUrl ? _jsx(OfferingLink, { href: offering.usagePolicyUrl, label: "\u4F7F\u7528\u653F\u7B56" }) : null] })] }), offering.lifecycle === 'unavailable' && !authorizationMethodsForOffering(offering).some((method) => method.lifecycle === 'active') ? (_jsx("p", { className: "text-xs text-muted-foreground", children: offeringUnavailableMessage(offering) })) : null, endpoints.length ? _jsx(AiEndpointList, { endpoints: endpoints }) : null] }));
+    return (_jsxs("section", { className: "space-y-2", "aria-labelledby": `offering-${offering.id}`, children: [_jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { children: [_jsx("h4", { id: `offering-${offering.id}`, className: "text-sm font-medium text-foreground", children: title }), subtitle.length ? (_jsx("div", { className: "mt-1 flex items-center gap-2 text-xs text-muted-foreground", children: subtitle.map((part) => _jsx("span", { children: part }, part)) })) : null] }), _jsxs("div", { className: "flex flex-wrap items-center justify-end gap-x-3 gap-y-1 text-xs", children: [_jsx("span", { className: "text-muted-foreground", children: authMethodLabel(offering, methods) }), offering.consoleUrl ? _jsx(OfferingLink, { href: offering.consoleUrl, label: "\u63A7\u5236\u53F0" }) : null, offering.subscriptionUrl ? _jsx(OfferingLink, { href: offering.subscriptionUrl, label: "\u8BA2\u9605\u4E0E\u8D26\u5355" }) : null, offering.quota?.url ? _jsx(OfferingLink, { href: offering.quota.url, label: "\u989D\u5EA6\u4E0E\u7528\u91CF" }) : null, offering.usagePolicyUrl ? _jsx(OfferingLink, { href: offering.usagePolicyUrl, label: "\u4F7F\u7528\u653F\u7B56" }) : null] })] }), offering.lifecycle === 'unavailable' && !authorizationMethodsForOffering(offering).some((method) => method.lifecycle === 'active') ? (_jsx("p", { className: "text-xs text-muted-foreground", children: offeringUnavailableMessage(offering) })) : null, developerMode && endpoints.length ? _jsx(AiEndpointList, { endpoints: endpoints }) : null] }));
 }
 function OfferingLink({ href, label }) {
     return _jsx("a", { href: href, target: "_blank", rel: "noreferrer", className: "text-primary hover:underline", children: label });