@every-app/sdk 0.3.0-rc.1 → 0.3.0-rc.10

package/dist/dev/keypair.d.ts

@@ -17,6 +17,8 @@
  */
 /** Issuer of locally minted dev identity tokens. */
 export declare const DEV_ISSUER = "https://gateway.dev.localhost";
+/** The organization the dev gateway's seeded user belongs to (`everyAppWorker()` sets it as `EVERY_APP_ORG_ID` in dev). */
+export declare const DEV_ORG_ID = "dev-org";
 /** SPKI PEM public half of the dev keypair. */
 export declare const DEV_PUBLIC_KEY_PEM = "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh40zWf+QK3rJdMTNoy+X\nF9iydV5raWSeEt4DXyeY98c8IZHRjy2UXaaYejweebRsv9Az+bZuL3cfJ0E7pOGd\n4VCOiSG1BjJglmTC1whV4Md6qhLDVOP6iztUJSxDwnlR85UtOyNJ4G5dYY6RrAWl\nPMMXPSYdGWqAP4n5QXAw+7uTFmJMdWy1W8KLbTj//NSGn3DCm+EZJIC8q9yDhMSc\nM0ejJnBVColvp4T8k8dt2kYGu2Wd7dCMrHv/lxUoqD58avpdMOzbaZtwsQ7BAaIa\nmIeQ1AKxmnCj1np23uWvYQmoaZocvupLSALK7fWGUyVDZ+RW4HtN5KqzZypfiyZ8\nkQIDAQAB\n-----END PUBLIC KEY-----\n";
 /** PKCS#8 PEM private half of the dev keypair. Public, see above. */

package/dist/dev/keypair.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keypair.d.ts","sourceRoot":"","sources":["../../src/dev/keypair.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,oDAAoD;AACpD,eAAO,MAAM,UAAU,kCAAkC,CAAC;AAE1D,+CAA+C;AAC/C,eAAO,MAAM,kBAAkB,idAS9B,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,ysDA4B/B,CAAC"}
+{"version":3,"file":"keypair.d.ts","sourceRoot":"","sources":["../../src/dev/keypair.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,oDAAoD;AACpD,eAAO,MAAM,UAAU,kCAAkC,CAAC;AAC1D,2HAA2H;AAC3H,eAAO,MAAM,UAAU,YAAY,CAAC;AAEpC,+CAA+C;AAC/C,eAAO,MAAM,kBAAkB,idAS9B,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,ysDA4B/B,CAAC"}

package/dist/dev/keypair.js

@@ -17,6 +17,8 @@
  */
 /** Issuer of locally minted dev identity tokens. */
 export const DEV_ISSUER = "https://gateway.dev.localhost";
+/** The organization the dev gateway's seeded user belongs to (`everyAppWorker()` sets it as `EVERY_APP_ORG_ID` in dev). */
+export const DEV_ORG_ID = "dev-org";
 /** SPKI PEM public half of the dev keypair. */
 export const DEV_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh40zWf+QK3rJdMTNoy+X

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @every-app/sdk — what `everyapp.config.ts` imports: `defineEveryApp` and
+ * the manifest's types. A leaf, like the config itself (see ./manifest.ts).
+ */
+export { defineEveryApp, type EveryAppCapabilityEntry, type EveryAppClassResource, type EveryAppManifest, type EveryAppPublicRoute, type EveryAppQueueConsumer, type EveryAppResources, type EveryAppSecretEntry, type EveryAppSettingEntry, type EveryAppSettingNeed, type EveryAppWorkerLimits, } from "./manifest.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,cAAc,EACd,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+/**
+ * @every-app/sdk — what `everyapp.config.ts` imports: `defineEveryApp` and
+ * the manifest's types. A leaf, like the config itself (see ./manifest.ts).
+ */
+export { defineEveryApp, } from "./manifest.js";

package/dist/internal/aiDefault.d.ts

@@ -0,0 +1,204 @@
+/**
+ * The Gateway's default model provider: what an app that says "I need a
+ * chat model" (manifest `ai: { chat: true }`, the SDK's `ai()`, the route
+ * `/api/ai/default/…`) is served (docs/design/2026-10-model-providers.md).
+ *
+ * The default is resolved, never assumed: the operator's choice when one
+ * is stored (`everyapp ai default <provider>[/<model>]`, Manage workspace
+ * → Usage → AI default), else the shipped order below, first provider
+ * whose Gateway settings are all set; with none set, the first of the
+ * order with the settings it needs, so "Needs setup" asks for one key.
+ * OpenRouter comes first because one key reaches many models; Workers AI
+ * second because it needs no provider account (the Gateway's own
+ * Cloudflare token), with weaker models; then the single-vendor keys.
+ * Cloudflare AI Gateway is never a default: it has no models of its own
+ * and fronts whichever provider the default resolves to when
+ * `AI_GATEWAY_ID` is set (./capabilities.ts, `aig`).
+ *
+ * The models resolve the same way: the operator's model setting for the
+ * provider (`everyapp ai model <provider> --chat … --embeddings …`,
+ * `org_settings.ai_models`), else the catalog entry's seed (`chat.seedModel`,
+ * `embeddings.seedModel`). Nothing reads a seed except through here.
+ *
+ * Everything here is pure: what is set is asked of the caller (`isSet`),
+ * which reads the Gateway's env, the Worker's secret names, or `.dev.vars`.
+ */
+import { type AiProviderCapability, type AiRoute, type Capability, type CapabilityLookup } from "./capabilities.js";
+/** The reserved provider id apps call for the default: `/api/ai/default/…`. */
+export declare const AI_DEFAULT_PROVIDER = "default";
+/** The catalog id of Cloudflare AI Gateway, the proxy entry. */
+export declare const AI_GATEWAY_PROVIDER = "ai-gateway";
+/** The settings that make AI Gateway front the providers that have a slug. */
+export declare const AI_GATEWAY_SETTINGS: readonly ["AI_GATEWAY_ID", "CLOUDFLARE_ACCOUNT_ID"];
+/**
+ * The shipped order: the provider the default resolves to when the
+ * operator chose none, the first of these whose settings are set.
+ */
+export declare const AI_DEFAULT_ORDER: readonly string[];
+/** The model name an app sends to mean "the default's model". */
+export declare const AI_DEFAULT_MODEL = "default";
+/** The paths an app calls under `/api/ai/default`, OpenAI-shaped. */
+export declare const AI_DEFAULT_ROUTES: {
+    readonly chat: "/v1/chat/completions";
+    readonly embeddings: "/v1/embeddings";
+};
+export type AiDefaultRoute = keyof typeof AI_DEFAULT_ROUTES;
+/**
+ * A choice as typed (`everyapp ai default openrouter/anthropic/claude-sonnet-5.5`,
+ * the Usage page's dialog, `everyapp_ai_default`): the provider, and the
+ * chat model to store for it. The provider goes to `org_settings.ai_default`,
+ * the model to that provider's `chat` in `org_settings.ai_models`.
+ */
+export interface AiDefaultChoice {
+    provider: string;
+    model?: string;
+}
+/** The operator's models for one provider; a field left out serves the seed. */
+export interface AiModelSetting {
+    chat?: string;
+    embeddings?: string;
+}
+/** The operator's models by provider id (`org_settings.ai_models`, JSON). */
+export type AiModelSettings = Readonly<Record<string, AiModelSetting>>;
+/** A change to one provider's models: a name sets it, null puts the seed back, absent leaves it. */
+export interface AiModelPatch {
+    chat?: string | null;
+    embeddings?: string | null;
+}
+/** Whether `value` can be a model id: 1 to 200 characters, no surrounding or control whitespace. */
+export declare function isAiModelName(value: string): boolean;
+/**
+ * `org_settings.ai_models` as stored: a JSON object of provider id →
+ * `{ chat?, embeddings? }`. Anything else (null, malformed JSON, a field
+ * that isn't a model name) reads as no setting, so the seed serves.
+ */
+export declare function parseAiModelSettings(value: string | null | undefined): AiModelSettings;
+/** The stored text of the settings, providers sorted; null when nothing is set. */
+export declare function formatAiModelSettings(settings: AiModelSettings): string | null;
+/** `settings` with one provider's models changed by `patch`. */
+export declare function withAiModelSetting(settings: AiModelSettings, provider: string, patch: AiModelPatch): AiModelSettings;
+/**
+ * `openrouter` or `openrouter/anthropic/claude-haiku-5.5` as typed:
+ * the provider id up to the first slash, the model after it (a model id
+ * may hold slashes of its own). Null for blank or malformed text.
+ */
+export declare function parseAiDefaultChoice(value: string | null | undefined): AiDefaultChoice | null;
+/** The text of a choice: `provider` or `provider/model`. */
+export declare function formatAiDefaultChoice(choice: AiDefaultChoice): string;
+/**
+ * The provider id `org_settings.ai_default` holds, or null. The column
+ * holds the provider alone (its models are in `ai_models`); text after a
+ * first slash is not read.
+ */
+export declare function parseAiDefaultProvider(value: string | null | undefined): string | null;
+/** Whether `name` holds a value, as the Gateway's env or a secret list says. */
+export type IsSet = (name: string) => boolean;
+/** An `ai` entry the default may resolve to: not the proxy, with a chat route. */
+export type AiDefaultCapability = AiProviderCapability & {
+    chat: AiRoute;
+};
+export declare function canBeAiDefault(capability: Capability | undefined): capability is AiDefaultCapability;
+/**
+ * The Gateway settings an `ai` entry needs before it serves: its key
+ * (unless the entry works without one, `authOptional`) and what its URL
+ * needs besides (`alsoNeeds`).
+ */
+export declare function aiRequiredSettings(capability: AiProviderCapability): string[];
+/** Whether every setting the entry needs is set. */
+export declare function aiProviderConfigured(capability: AiProviderCapability, isSet: IsSet): boolean;
+/** Whether AI Gateway fronts calls: its id and the account are set. */
+export declare function aiGatewayConfigured(isSet: IsSet): boolean;
+/** Whether a call to `capability` goes through AI Gateway: it is configured and the entry has a slug. */
+export declare function viaAiGateway(capability: AiProviderCapability, isSet: IsSet): boolean;
+/** One provider the default may resolve to, with its state on this Gateway. */
+export interface AiDefaultCandidate {
+    id: string;
+    label: string;
+    /** The Gateway settings it needs; what to set when it isn't configured. */
+    settings: string[];
+    configured: boolean;
+    /** The chat model the Gateway fills in when the app names none: the operator's setting, else the seed. */
+    model: string;
+    /** The embeddings model, the same way; absent when the entry has no embeddings route. */
+    embeddingsModel?: string;
+    /** The catalog's seeds: what serves where the operator set no model. */
+    seed: {
+        chat: string;
+        embeddings?: string;
+    };
+    /** Through Cloudflare AI Gateway, as things are set now. */
+    viaAiGateway: boolean;
+    embeddings: boolean;
+}
+/** Where the resolved default came from. */
+export type AiDefaultSource = 
+/** The operator's stored choice. */
+"setting"
+/** The shipped order: the first provider that is configured. */
+ | "order"
+/** Nothing is configured: the first of the order, with what to set. */
+ | "none";
+export interface AiDefaultResolution {
+    provider: string;
+    label: string;
+    /** The chat model the default serves: the operator's setting for the provider, else the seed. */
+    model: string;
+    /** The embeddings model, the same way; absent when the provider has no embeddings route. */
+    embeddingsModel?: string;
+    /** The provider's seeds. */
+    seed: {
+        chat: string;
+        embeddings?: string;
+    };
+    source: AiDefaultSource;
+    /** Every setting the provider needs is set, so the default serves. */
+    configured: boolean;
+    /** The Gateway settings the provider needs: what to set when it isn't configured. */
+    settings: string[];
+    via: "ai-gateway" | "direct";
+    chat: AiRoute;
+    embeddings?: AiRoute;
+    /** Every provider the default could be, in the shipped order, the choice first. */
+    candidates: AiDefaultCandidate[];
+    /**
+     * The stored choice names something the default can't be (an id the
+     * catalog doesn't have, an entry with no chat route, the proxy): the
+     * order decided instead, and this says why.
+     */
+    problem?: string;
+}
+/**
+ * Every provider the default may resolve to: the shipped order first,
+ * then any other `ai` entry of `lookup` with a chat route (a registered
+ * row, one day), each with its state.
+ */
+export declare function aiDefaultCandidates(isSet: IsSet, lookup?: CapabilityLookup, models?: AiModelSettings): AiDefaultCandidate[];
+/** Why `choice.provider` can't be the default, or null when it can. */
+export declare function aiDefaultChoiceProblem(choice: AiDefaultChoice, lookup?: CapabilityLookup): string | null;
+/**
+ * Why `patch` can't be stored for `provider`, or null when it can: the
+ * provider must be one the default can be, a model name must be a model
+ * name, and an embeddings model needs the entry's embeddings route.
+ */
+export declare function aiModelPatchProblem(provider: string, patch: AiModelPatch, lookup?: CapabilityLookup): string | null;
+/**
+ * The Gateway's effective default, from the stored choice (or none) and
+ * what is set. A choice that names a provider which isn't configured
+ * still wins (the operator chose it: `configured` is false and `settings`
+ * says what to set); a choice the default can't be is reported as
+ * `problem` and the order decides.
+ */
+export declare function resolveAiDefault(input: {
+    /** The stored provider (`org_settings.ai_default`), or null for the shipped order. */
+    provider: string | null;
+    /** The operator's models by provider (`org_settings.ai_models`); none: the seeds serve. */
+    models?: AiModelSettings;
+    isSet: IsSet;
+    lookup?: CapabilityLookup;
+}): AiDefaultResolution;
+/**
+ * The sentence setup shows for an unconfigured default: the one key to
+ * set, and the alternatives in the order.
+ */
+export declare function aiDefaultSetupHint(resolution: AiDefaultResolution): string;
+//# sourceMappingURL=aiDefault.d.ts.map

package/dist/internal/aiDefault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiDefault.d.ts","sourceRoot":"","sources":["../../src/internal/aiDefault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAE3B,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAE7C,gEAAgE;AAChE,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAEhD,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,qDAGtB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAQ7C,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAE1C,qEAAqE;AACrE,eAAO,MAAM,iBAAiB;;;CAGpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAEvE,oGAAoG;AACpG,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,oGAAoG;AACpG,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAOpD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,eAAe,CAwBjB;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,eAAe,GACxB,MAAM,GAAG,IAAI,CAuBf;AAED,gEAAgE;AAChE,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,GAClB,eAAe,CAajB;AAKD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,eAAe,GAAG,IAAI,CAMxB;AAED,4DAA4D;AAC5D,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAErE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAEf;AAED,gFAAgF;AAChF,MAAM,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;AAE9C,kFAAkF;AAClF,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3E,wBAAgB,cAAc,CAC5B,UAAU,EAAE,UAAU,GAAG,SAAS,GACjC,UAAU,IAAI,mBAAmB,CAMnC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,oBAAoB,GAAG,MAAM,EAAE,CAK7E;AAED,oDAAoD;AACpD,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,oBAAoB,EAChC,KAAK,EAAE,KAAK,GACX,OAAO,CAET;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAEzD;AAED,yGAAyG;AACzG,wBAAgB,YAAY,CAC1B,UAAU,EAAE,oBAAoB,EAChC,KAAK,EAAE,KAAK,GACX,OAAO,CAET;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,0GAA0G;IAC1G,KAAK,EAAE,MAAM,CAAC;IACd,yFAAyF;IACzF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,4DAA4D;IAC5D,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,4CAA4C;AAC5C,MAAM,MAAM,eAAe;AACzB,oCAAoC;AAClC,SAAS;AACX,gEAAgE;GAC9D,OAAO;AACT,uEAAuE;GACrE,MAAM,CAAC;AAEX,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,iGAAiG;IACjG,KAAK,EAAE,MAAM,CAAC;IACd,4FAA4F;IAC5F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4BAA4B;IAC5B,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,MAAM,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,UAAU,EAAE,OAAO,CAAC;IACpB,qFAAqF;IACrF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,GAAG,EAAE,YAAY,GAAG,QAAQ,CAAC;IAC7B,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAuCD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,KAAK,EACZ,MAAM,GAAE,gBAA0B,EAClC,MAAM,GAAE,eAAoB,GAC3B,kBAAkB,EAAE,CActB;AAED,uEAAuE;AACvE,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,eAAe,EACvB,MAAM,GAAE,gBAA0B,GACjC,MAAM,GAAG,IAAI,CAcf;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EACnB,MAAM,GAAE,gBAA0B,GACjC,MAAM,GAAG,IAAI,CAef;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,sFAAsF;IACtF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B,GAAG,mBAAmB,CA4CtB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,mBAAmB,GAAG,MAAM,CAc1E"}

package/dist/internal/aiDefault.js

@@ -0,0 +1,334 @@
+/**
+ * The Gateway's default model provider: what an app that says "I need a
+ * chat model" (manifest `ai: { chat: true }`, the SDK's `ai()`, the route
+ * `/api/ai/default/…`) is served (docs/design/2026-10-model-providers.md).
+ *
+ * The default is resolved, never assumed: the operator's choice when one
+ * is stored (`everyapp ai default <provider>[/<model>]`, Manage workspace
+ * → Usage → AI default), else the shipped order below, first provider
+ * whose Gateway settings are all set; with none set, the first of the
+ * order with the settings it needs, so "Needs setup" asks for one key.
+ * OpenRouter comes first because one key reaches many models; Workers AI
+ * second because it needs no provider account (the Gateway's own
+ * Cloudflare token), with weaker models; then the single-vendor keys.
+ * Cloudflare AI Gateway is never a default: it has no models of its own
+ * and fronts whichever provider the default resolves to when
+ * `AI_GATEWAY_ID` is set (./capabilities.ts, `aig`).
+ *
+ * The models resolve the same way: the operator's model setting for the
+ * provider (`everyapp ai model <provider> --chat … --embeddings …`,
+ * `org_settings.ai_models`), else the catalog entry's seed (`chat.seedModel`,
+ * `embeddings.seedModel`). Nothing reads a seed except through here.
+ *
+ * Everything here is pure: what is set is asked of the caller (`isSet`),
+ * which reads the Gateway's env, the Worker's secret names, or `.dev.vars`.
+ */
+import { CATALOG, } from "./capabilities.js";
+/** The reserved provider id apps call for the default: `/api/ai/default/…`. */
+export const AI_DEFAULT_PROVIDER = "default";
+/** The catalog id of Cloudflare AI Gateway, the proxy entry. */
+export const AI_GATEWAY_PROVIDER = "ai-gateway";
+/** The settings that make AI Gateway front the providers that have a slug. */
+export const AI_GATEWAY_SETTINGS = [
+    "AI_GATEWAY_ID",
+    "CLOUDFLARE_ACCOUNT_ID",
+];
+/**
+ * The shipped order: the provider the default resolves to when the
+ * operator chose none, the first of these whose settings are set.
+ */
+export const AI_DEFAULT_ORDER = [
+    "openrouter",
+    "workers-ai",
+    "openai",
+    "anthropic",
+    "groq",
+    "mistral",
+    "gemini",
+];
+/** The model name an app sends to mean "the default's model". */
+export const AI_DEFAULT_MODEL = "default";
+/** The paths an app calls under `/api/ai/default`, OpenAI-shaped. */
+export const AI_DEFAULT_ROUTES = {
+    chat: "/v1/chat/completions",
+    embeddings: "/v1/embeddings",
+};
+/** Whether `value` can be a model id: 1 to 200 characters, no surrounding or control whitespace. */
+export function isAiModelName(value) {
+    return (value.length >= 1 &&
+        value.length <= 200 &&
+        value.trim() === value &&
+        !/[\u0000-\u001f\u007f]/.test(value));
+}
+/**
+ * `org_settings.ai_models` as stored: a JSON object of provider id →
+ * `{ chat?, embeddings? }`. Anything else (null, malformed JSON, a field
+ * that isn't a model name) reads as no setting, so the seed serves.
+ */
+export function parseAiModelSettings(value) {
+    if (typeof value !== "string" || value.trim() === "")
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        return {};
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        return {};
+    const settings = {};
+    for (const [provider, entry] of Object.entries(parsed)) {
+        if (!entry || typeof entry !== "object" || Array.isArray(entry))
+            continue;
+        const setting = {};
+        for (const kind of ["chat", "embeddings"]) {
+            const model = entry[kind];
+            if (typeof model === "string" && isAiModelName(model)) {
+                setting[kind] = model;
+            }
+        }
+        if (setting.chat !== undefined || setting.embeddings !== undefined) {
+            settings[provider] = setting;
+        }
+    }
+    return settings;
+}
+/** The stored text of the settings, providers sorted; null when nothing is set. */
+export function formatAiModelSettings(settings) {
+    const providers = Object.keys(settings)
+        .filter((id) => settings[id]?.chat !== undefined ||
+        settings[id]?.embeddings !== undefined)
+        .sort();
+    if (providers.length === 0)
+        return null;
+    return JSON.stringify(Object.fromEntries(providers.map((id) => {
+        const { chat, embeddings } = settings[id];
+        return [
+            id,
+            {
+                ...(chat === undefined ? {} : { chat }),
+                ...(embeddings === undefined ? {} : { embeddings }),
+            },
+        ];
+    })));
+}
+/** `settings` with one provider's models changed by `patch`. */
+export function withAiModelSetting(settings, provider, patch) {
+    const next = { ...settings[provider] };
+    for (const kind of ["chat", "embeddings"]) {
+        const value = patch[kind];
+        if (value === null)
+            delete next[kind];
+        else if (value !== undefined)
+            next[kind] = value;
+    }
+    const rest = Object.fromEntries(Object.entries(settings).filter(([id]) => id !== provider));
+    return next.chat === undefined && next.embeddings === undefined
+        ? rest
+        : { ...rest, [provider]: next };
+}
+/** A choice must name a provider id; the model is free text after the first slash. */
+const CHOICE = /^([a-z][a-z0-9-]{1,39})(?:\/(.{1,200}))?$/;
+/**
+ * `openrouter` or `openrouter/anthropic/claude-haiku-5.5` as typed:
+ * the provider id up to the first slash, the model after it (a model id
+ * may hold slashes of its own). Null for blank or malformed text.
+ */
+export function parseAiDefaultChoice(value) {
+    if (typeof value !== "string")
+        return null;
+    const match = CHOICE.exec(value.trim());
+    if (!match)
+        return null;
+    const model = match[2]?.trim();
+    return model ? { provider: match[1], model } : { provider: match[1] };
+}
+/** The text of a choice: `provider` or `provider/model`. */
+export function formatAiDefaultChoice(choice) {
+    return choice.model ? `${choice.provider}/${choice.model}` : choice.provider;
+}
+/**
+ * The provider id `org_settings.ai_default` holds, or null. The column
+ * holds the provider alone (its models are in `ai_models`); text after a
+ * first slash is not read.
+ */
+export function parseAiDefaultProvider(value) {
+    return parseAiDefaultChoice(value)?.provider ?? null;
+}
+export function canBeAiDefault(capability) {
+    return (capability?.mode === "ai" &&
+        capability.kind !== "proxy" &&
+        capability.chat !== undefined);
+}
+/**
+ * The Gateway settings an `ai` entry needs before it serves: its key
+ * (unless the entry works without one, `authOptional`) and what its URL
+ * needs besides (`alsoNeeds`).
+ */
+export function aiRequiredSettings(capability) {
+    return [
+        ...(capability.authOptional ? [] : [capability.auth.secret]),
+        ...(capability.alsoNeeds ?? []),
+    ];
+}
+/** Whether every setting the entry needs is set. */
+export function aiProviderConfigured(capability, isSet) {
+    return aiRequiredSettings(capability).every((name) => isSet(name));
+}
+/** Whether AI Gateway fronts calls: its id and the account are set. */
+export function aiGatewayConfigured(isSet) {
+    return AI_GATEWAY_SETTINGS.every((name) => isSet(name));
+}
+/** Whether a call to `capability` goes through AI Gateway: it is configured and the entry has a slug. */
+export function viaAiGateway(capability, isSet) {
+    return capability.aig !== undefined && aiGatewayConfigured(isSet);
+}
+/** The provider's models: the operator's setting, else the seed. */
+function modelsOf(id, capability, models) {
+    const setting = models[id];
+    const { chat, embeddings } = capability;
+    return {
+        model: setting?.chat ?? chat.seedModel,
+        ...(embeddings
+            ? { embeddingsModel: setting?.embeddings ?? embeddings.seedModel }
+            : {}),
+        seed: {
+            chat: chat.seedModel,
+            ...(embeddings ? { embeddings: embeddings.seedModel } : {}),
+        },
+    };
+}
+function candidateOf(id, capability, isSet, models) {
+    return {
+        id,
+        label: capability.label,
+        settings: aiRequiredSettings(capability),
+        configured: aiProviderConfigured(capability, isSet),
+        ...modelsOf(id, capability, models),
+        viaAiGateway: viaAiGateway(capability, isSet),
+        embeddings: capability.embeddings !== undefined,
+    };
+}
+/**
+ * Every provider the default may resolve to: the shipped order first,
+ * then any other `ai` entry of `lookup` with a chat route (a registered
+ * row, one day), each with its state.
+ */
+export function aiDefaultCandidates(isSet, lookup = CATALOG, models = {}) {
+    const ids = [
+        ...AI_DEFAULT_ORDER,
+        ...lookup.ids().filter((id) => !AI_DEFAULT_ORDER.includes(id)),
+    ];
+    return ids.flatMap((id) => {
+        const capability = lookup.get(id);
+        // A registered row whose key isn't bound to the hosts it has now reads
+        // as unset everywhere (`providers.value-bound-to-hosts`).
+        const set = lookup.bound && !lookup.bound(id) ? () => false : isSet;
+        return canBeAiDefault(capability)
+            ? [candidateOf(id, capability, set, models)]
+            : [];
+    });
+}
+/** Why `choice.provider` can't be the default, or null when it can. */
+export function aiDefaultChoiceProblem(choice, lookup = CATALOG) {
+    const capability = lookup.get(choice.provider);
+    if (!capability)
+        return `${choice.provider} isn't a provider this Gateway knows`;
+    if (capability.mode !== "ai") {
+        return `${choice.provider} is an API provider, not a model provider`;
+    }
+    if (capability.kind === "proxy") {
+        return `${capability.label} fronts the model providers and serves no models of its own; set a provider, and turn the gateway on with everyapp ai gateway on`;
+    }
+    if (!capability.chat) {
+        return `${capability.label} has no OpenAI-shaped chat route, so it can't serve the default; an app pins it by listing it under providers`;
+    }
+    return null;
+}
+/**
+ * Why `patch` can't be stored for `provider`, or null when it can: the
+ * provider must be one the default can be, a model name must be a model
+ * name, and an embeddings model needs the entry's embeddings route.
+ */
+export function aiModelPatchProblem(provider, patch, lookup = CATALOG) {
+    const why = aiDefaultChoiceProblem({ provider }, lookup);
+    if (why)
+        return why;
+    const capability = lookup.get(provider);
+    if (!canBeAiDefault(capability))
+        return `${provider} can't serve the default`;
+    for (const kind of ["chat", "embeddings"]) {
+        const value = patch[kind];
+        if (typeof value === "string" && !isAiModelName(value)) {
+            return `${JSON.stringify(value)} isn't a model id: 1 to 200 characters, no surrounding spaces`;
+        }
+    }
+    if (typeof patch.embeddings === "string" && !capability.embeddings) {
+        return `${capability.label} has no embeddings route, so it serves no embeddings model`;
+    }
+    return null;
+}
+/**
+ * The Gateway's effective default, from the stored choice (or none) and
+ * what is set. A choice that names a provider which isn't configured
+ * still wins (the operator chose it: `configured` is false and `settings`
+ * says what to set); a choice the default can't be is reported as
+ * `problem` and the order decides.
+ */
+export function resolveAiDefault(input) {
+    const lookup = input.lookup ?? CATALOG;
+    const models = input.models ?? {};
+    const { isSet } = input;
+    const candidates = aiDefaultCandidates(isSet, lookup, models);
+    const resolve = (id, capability, source, problem) => ({
+        provider: id,
+        label: capability.label,
+        ...modelsOf(id, capability, models),
+        source,
+        configured: aiProviderConfigured(capability, isSet),
+        settings: aiRequiredSettings(capability),
+        via: viaAiGateway(capability, isSet) ? "ai-gateway" : "direct",
+        chat: capability.chat,
+        ...(capability.embeddings ? { embeddings: capability.embeddings } : {}),
+        candidates: [
+            ...candidates.filter((candidate) => candidate.id === id),
+            ...candidates.filter((candidate) => candidate.id !== id),
+        ],
+        ...(problem ? { problem } : {}),
+    });
+    let problem;
+    if (input.provider) {
+        const capability = lookup.get(input.provider);
+        const why = aiDefaultChoiceProblem({ provider: input.provider }, lookup);
+        if (!why && canBeAiDefault(capability)) {
+            return resolve(input.provider, capability, "setting");
+        }
+        problem = why ?? undefined;
+    }
+    const configured = candidates.find((candidate) => candidate.configured);
+    const first = configured ?? candidates[0];
+    if (!first) {
+        throw new Error("the catalog has no AI provider with a chat route");
+    }
+    const capability = lookup.get(first.id);
+    if (!canBeAiDefault(capability))
+        throw new Error("unreachable");
+    return resolve(first.id, capability, configured ? "order" : "none", problem);
+}
+/**
+ * The sentence setup shows for an unconfigured default: the one key to
+ * set, and the alternatives in the order.
+ */
+export function aiDefaultSetupHint(resolution) {
+    const others = resolution.candidates
+        .filter((candidate) => candidate.id !== resolution.provider)
+        .slice(0, 3)
+        .map((candidate) => `${candidate.label} (${candidate.settings.join(" and ")})`);
+    const head = resolution.source === "setting"
+        ? `The Gateway's default model provider is ${resolution.label}; set ${resolution.settings.join(" and ")}.`
+        : `Any one model provider's key makes the app work; ${resolution.label} is first in the order: set ${resolution.settings.join(" and ")}.`;
+    return others.length > 0
+        ? `${head} Or another: ${others.join(", ")}; pick one with everyapp ai default <provider>.`
+        : head;
+}

package/dist/internal/aiProviders.d.ts

@@ -7,9 +7,12 @@
  * this derives the fallback's view of each, and holds the one response
  * rewrite the gateway has (Workers AI's numeric tokens).
  */
-import { type AiProviderCapability, type AiProviderId, type ApiKeyAuth, type CapabilitySettings } from "./capabilities.js";
+import { type AiProviderCapability, type AiProviderId, type AiRoute, type ApiKeyAuth, type CapabilitySettings } from "./capabilities.js";
 export interface DevAiProviderSpec {
     origin: string;
+    /** The routes the default maps onto in dev, with the model filled in (the entry's `chat` and `embeddings`). */
+    chat?: AiRoute;
+    embeddings?: AiRoute;
     /** The gateway secret holding the provider key; in local dev, the `.dev.vars` name. */
     keyEnv: string;
     /** Where the key goes on a request (`authorizationOf`). */
@@ -29,7 +32,9 @@ export type DevAiProvider = AiProviderId;
 /** The fallback's view of one `ai` catalog entry. */
 export declare function devAiProviderSpec(capability: AiProviderCapability): DevAiProviderSpec;
 export declare const DEV_AI_PROVIDERS: Readonly<Record<DevAiProvider, DevAiProviderSpec>>;
-export declare function devAiProvider(name: string): DevAiProviderSpec | undefined;
+export declare function devAiProvider(name: string, 
+/** The dev Worker's bindings: a registered `ai` spec under `.everyapp/providers/<id>.json` resolves from them. */
+values?: Readonly<Record<string, unknown>>): DevAiProviderSpec | undefined;
 /** Every setting a provider needs, its key first: the names `.dev.vars` and the gateway use. */
 export declare function aiProviderSettings(spec: DevAiProviderSpec): string[];
 /**

package/dist/internal/aiProviders.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiProviders.d.ts","sourceRoot":"","sources":["../../src/internal/aiProviders.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,IAAI,EAAE,UAAU,CAAC;IACjB,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC;IAClE,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,KAAK,QAAQ,CAAC;CACpE;AAED,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC;AAEzC,qDAAqD;AACrD,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,oBAAoB,GAC/B,iBAAiB,CAkBnB;AAED,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC,MAAM,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAQG,CAAC;AAE9C,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAIzE;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,GAAG,IAAI,CAcf;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,GAAG,IAAI,CAIf;AAED,6DAA6D;AAC7D,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,SAAK,GACV,GAAG,GAAG,IAAI,CAOZ;AAWD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,GACjB,QAAQ,CAqBV"}
+{"version":3,"file":"aiProviders.d.ts","sourceRoot":"","sources":["../../src/internal/aiProviders.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAG3B,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,+GAA+G;IAC/G,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,IAAI,EAAE,UAAU,CAAC;IACjB,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC;IAClE,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,KAAK,QAAQ,CAAC;CACpE;AAED,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC;AAEzC,qDAAqD;AACrD,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,oBAAoB,GAC/B,iBAAiB,CAoBnB;AAED,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC,MAAM,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAUG,CAAC;AAE9C,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM;AACZ,kHAAkH;AAClH,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACzC,iBAAiB,GAAG,SAAS,CAS/B;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,GAAG,IAAI,CAcf;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,GAAG,IAAI,CAIf;AAED,6DAA6D;AAC7D,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,SAAK,GACV,GAAG,GAAG,IAAI,CAOZ;AAWD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,GACjB,QAAQ,CAqBV"}