@every-app/sdk 0.3.0-rc.1 → 0.3.0-rc.11

package/dist/internal/catalog/infra.d.ts

@@ -0,0 +1,458 @@
+export declare const INFRA: {
+    readonly cloudflare: {
+        readonly mode: "api_key";
+        readonly label: "Cloudflare";
+        readonly description: "Cloudflare's API: zones, DNS, Workers, R2, D1, KV and the rest of an account.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "CLOUDFLARE_PROVIDER_API_TOKEN";
+        };
+        readonly docs: "https://dash.cloudflare.com/profile/api-tokens";
+        readonly api: "https://developers.cloudflare.com/api/";
+        readonly hosts: readonly ["api.cloudflare.com"];
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PUT", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["client", "v4", "user"], readonly ["client", "v4", "memberships"], readonly ["client", "v4", "organizations"], readonly ["client", "v4", "tenants"], readonly ["members"], readonly ["tokens"], readonly ["roles"], readonly ["iam"], readonly ["subscriptions"], readonly ["payment-methods"], readonly ["pay-invoice"], readonly ["receipts"], readonly ["invoices"], readonly ["client-secret"], readonly ["billing"], readonly ["logs", "audit"], readonly ["audit_logs"], readonly ["alerting", "v3", "destinations", "webhooks"], readonly ["ai", "run"], readonly ["ai", "v1"]];
+        readonly hint: "An API token from My Profile > API Tokens with only the permissions the app needs; the Gateway sends it as a bearer token. A token on the Gateway's own account can read and change the Gateway, so keep it narrow or use another account.";
+        readonly secrets: readonly [{
+            readonly name: "CLOUDFLARE_PROVIDER_API_TOKEN";
+            readonly hint: "A user or account-owned API token scoped to the zones and permissions the app needs, never a Global API Key.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly path: "/client/v4/user/tokens/verify";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "For a user token; account-owned tokens use /client/v4/accounts/<id>/tokens/verify. Account-wide, so run it from the person's terminal.";
+        };
+        readonly rate: {
+            readonly note: "1,200 requests per 5 minutes per user or account token; 200 a second per IP; GraphQL by query cost, at most 320 per 5 minutes.";
+        };
+        readonly example: "list the DNS records for my domain";
+        readonly verified: {
+            readonly on: "2026-10-25";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["infrastructure", "dns", "hosting"];
+    };
+    readonly posthog: {
+        readonly mode: "api_key";
+        readonly label: "PostHog";
+        readonly description: "Product analytics: insights, feature flags, persons, cohorts, experiments and HogQL queries.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "POSTHOG_PERSONAL_API_KEY";
+        };
+        readonly docs: "https://us.posthog.com/settings/user-api-keys";
+        readonly api: "https://posthog.com/docs/api";
+        readonly hosts: readonly ["us.posthog.com", "eu.posthog.com"];
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PUT", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["api", "users"], readonly ["api", "user"], readonly ["api", "organizations"], readonly ["api", "billing"], readonly ["api", "revoke_leaked_key"], readonly ["project_secret_api_keys"], readonly ["billing"], readonly ["activity_log"], readonly ["advanced_activity_logs"], readonly ["hog_functions"], readonly ["batch_exports"], readonly ["integrations"]];
+        readonly hint: "A personal API key from Settings > Personal API keys, with only the scopes the app needs; the Gateway sends it as a bearer token to us.posthog.com or eu.posthog.com. HogQL queries are POSTs, so an app that runs them asks for write.";
+        readonly secrets: readonly [{
+            readonly name: "POSTHOG_PERSONAL_API_KEY";
+            readonly hint: "A personal API key (phx_...) with only the scopes the app needs, from the region the project lives in; never the project token.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly host: "us.posthog.com";
+            readonly path: "/api/users/@me/";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "Needs the user:read scope; use eu.posthog.com for an EU project. Account-wide, so run it from the person's terminal.";
+        };
+        readonly rate: {
+            readonly perMinute: 480;
+            readonly note: "Create, read, update and delete endpoints 480 a minute and 4,800 an hour; analytics endpoints 240 a minute; the query endpoint 2,400 an hour.";
+        };
+        readonly example: "list the feature flags in my project and whether each is on";
+        readonly verified: {
+            readonly on: "2026-10-25";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["analytics", "product", "feature-flags"];
+    };
+    readonly mixpanel: {
+        readonly mode: "api_key";
+        readonly label: "Mixpanel";
+        readonly description: "Product analytics: saved reports, profiles, raw event export and event import.";
+        readonly auth: {
+            readonly kind: "basic";
+            readonly secret: "MIXPANEL_SERVICE_ACCOUNT_SECRET";
+            readonly as: "password";
+            readonly user: {
+                readonly secret: "MIXPANEL_SERVICE_ACCOUNT_USERNAME";
+            };
+        };
+        readonly docs: "https://mixpanel.com/settings/org#serviceaccounts";
+        readonly api: "https://docs.mixpanel.com/reference/overview";
+        readonly hosts: readonly ["mixpanel.com", "eu.mixpanel.com", "in.mixpanel.com", "data.mixpanel.com", "data-eu.mixpanel.com", "data-in.mixpanel.com", "api.mixpanel.com", "api-eu.mixpanel.com", "api-in.mixpanel.com"];
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PUT", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["api", "app", "me"], readonly ["api", "app", "organizations"], readonly ["service-accounts"], readonly ["data-retrievals"], readonly ["data-deletions"], readonly ["nessie"]];
+        readonly hint: "A service account from Organization Settings > Service Accounts; the Gateway sends its username and secret as HTTP Basic. Most calls also need the project_id parameter, and an EU or India project uses its own hosts.";
+        readonly secrets: readonly [{
+            readonly name: "MIXPANEL_SERVICE_ACCOUNT_USERNAME";
+            readonly hint: "The service account's username, shown when it is created in Organization Settings > Service Accounts.";
+        }, {
+            readonly name: "MIXPANEL_SERVICE_ACCOUNT_SECRET";
+            readonly hint: "The service account's secret, shown once when it is created; give the account the narrowest role and only the projects the app needs.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly host: "mixpanel.com";
+            readonly path: "/api/app/me";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "Lists the organizations and projects the service account reaches. Account-wide, so run it from the person's terminal.";
+        };
+        readonly rate: {
+            readonly note: "Per project: Query API 60 queries an hour, 5 at once; Raw Data Export 60 an hour, 3 a second, 100 at once; ingestion about 2 GB a minute.";
+        };
+        readonly example: "pull last week's numbers from my saved Insights report";
+        readonly verified: {
+            readonly on: "2026-10-25";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["analytics", "product"];
+    };
+    readonly segment: {
+        readonly mode: "api_key";
+        readonly label: "Segment";
+        readonly description: "Sends identify, track, page, group and alias events to a Segment source.";
+        readonly auth: {
+            readonly kind: "basic";
+            readonly secret: "SEGMENT_WRITE_KEY";
+            readonly as: "username";
+        };
+        readonly docs: "https://www.twilio.com/docs/segment/connections/find-writekey";
+        readonly api: "https://www.twilio.com/docs/segment/connections/sources/catalog/libraries/server/http-api";
+        readonly hosts: readonly ["api.segment.io", "events.eu1.segmentapis.com"];
+        readonly data: "account";
+        readonly access: readonly ["write"];
+        readonly readMethods: readonly [];
+        readonly writeMethods: readonly ["POST"];
+        readonly accountWidePaths: readonly [];
+        readonly hint: "The write key of an HTTP API source, from the source's Settings > API Keys; the Gateway sends it as the Basic username with an empty password. It only sends events; an EU workspace uses events.eu1.segmentapis.com.";
+        readonly secrets: readonly [{
+            readonly name: "SEGMENT_WRITE_KEY";
+            readonly hint: "The write key of an HTTP API source, from the source's Settings > API Keys.";
+        }];
+        readonly rate: {
+            readonly perSecond: 1000;
+            readonly note: "Recommended ceiling per workspace; 32 KB per call, 500 KB and 2,500 events per batch.";
+        };
+        readonly example: "record a Signed Up event for a new user";
+        readonly verified: {
+            readonly on: "2026-10-25";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["analytics", "events", "cdp"];
+    };
+    readonly supabase: {
+        readonly mode: "api_key";
+        readonly label: "Supabase";
+        readonly description: "A Supabase project's Postgres REST API and Storage, with its secret key.";
+        readonly auth: {
+            readonly kind: "header";
+            readonly secret: "SUPABASE_SECRET_KEY";
+            readonly header: "apikey";
+        };
+        readonly docs: "https://supabase.com/dashboard/project/_/settings/api-keys";
+        readonly api: "https://supabase.com/docs/guides/api";
+        readonly hosts: readonly [];
+        readonly hostSetting: "SUPABASE_HOST";
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PUT", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["auth", "v1", "admin"], readonly ["pg"]];
+        readonly hint: "A secret key (sb_secret_...) from Settings > API Keys and the project's host; the Gateway sends the key in the apikey header. The key bypasses Row Level Security, and RPC calls are POSTs, so they need write.";
+        readonly secrets: readonly [{
+            readonly name: "SUPABASE_SECRET_KEY";
+            readonly hint: "A secret key (sb_secret_...) from Settings > API Keys, made for this Gateway alone; it bypasses Row Level Security.";
+        }, {
+            readonly name: "SUPABASE_HOST";
+            readonly hint: "The project's host, <project-ref>.supabase.co, from the project URL.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly path: "/rest/v1/";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "The REST API's OpenAPI root, which only a secret key may read; sent to the host in SUPABASE_HOST.";
+        };
+        readonly example: "list the ten newest rows in my orders table";
+        readonly verified: {
+            readonly on: "2026-10-25";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["database", "postgres", "storage"];
+    };
+    readonly turso: {
+        readonly mode: "api_key";
+        readonly label: "Turso";
+        readonly description: "Turso's Platform API: databases, groups, locations and usage for one organization.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "TURSO_API_TOKEN";
+        };
+        readonly docs: "https://docs.turso.tech/api-reference/authentication";
+        readonly api: "https://docs.turso.tech/api-reference/introduction";
+        readonly hosts: readonly ["api.turso.tech"];
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["auth"], readonly ["api-tokens"], readonly ["members"], readonly ["invites"], readonly ["invoices"], readonly ["subscription"], readonly ["plans"], readonly ["audit-logs"], readonly ["v1", "user"]];
+        readonly hint: "An organization-scoped Platform API token (turso auth api-tokens mint <name> --org <org>); the Gateway sends it as a bearer token to api.turso.tech. It manages databases and cannot query them: that is the turso-db entry.";
+        readonly secrets: readonly [{
+            readonly name: "TURSO_API_TOKEN";
+            readonly hint: "An organization-scoped or group-scoped Platform API token from turso auth api-tokens mint <name> --org <org>; never an unrestricted one.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly path: "/v1/auth/validate";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "Account-wide, so run it from the person's terminal.";
+        };
+        readonly example: "list the databases in my Turso organization";
+        readonly verified: {
+            readonly on: "2026-10-25";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["database", "sqlite"];
+    };
+    readonly "turso-db": {
+        readonly mode: "api_key";
+        readonly label: "Turso database";
+        readonly description: "SQL over HTTP to one Turso database: queries, dumps and migration status.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "TURSO_DB_AUTH_TOKEN";
+        };
+        readonly docs: "https://docs.turso.tech/sdk/authorization/tokens";
+        readonly api: "https://docs.turso.tech/sdk/http/reference";
+        readonly hosts: readonly [];
+        readonly hostSetting: "TURSO_DB_HOST";
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST"];
+        readonly accountWidePaths: readonly [];
+        readonly hint: "A database token (turso db tokens create <db>) and the database's HTTP host; the Gateway sends the token as a bearer token. Every query is a POST to /v2/pipeline, so an app that queries asks for write; a --read-only token keeps it to reads.";
+        readonly secrets: readonly [{
+            readonly name: "TURSO_DB_AUTH_TOKEN";
+            readonly hint: "A database token from turso db tokens create <db>, with --read-only or fine-grained permissions when the app only reads.";
+        }, {
+            readonly name: "TURSO_DB_HOST";
+            readonly hint: "The database's HTTP host, <db>-<org>.turso.io, from turso db show <db> --http-url.";
+        }];
+        readonly example: "count the rows in my users table";
+        readonly verified: {
+            readonly on: "2026-10-25";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["database", "sqlite", "sql"];
+    };
+    readonly neon: {
+        readonly mode: "api_key";
+        readonly label: "Neon";
+        readonly description: "Neon's management API: Postgres projects, branches, databases, roles and endpoints.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "NEON_API_KEY";
+        };
+        readonly docs: "https://neon.com/docs/manage/api-keys";
+        readonly api: "https://neon.com/docs/reference/api";
+        readonly hosts: readonly ["console.neon.tech"];
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PUT", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["api", "v2", "auth"], readonly ["api", "v2", "organizations"], readonly ["users", "me"], readonly ["api_keys"], readonly ["members"], readonly ["invitations"], readonly ["permissions"], readonly ["transfer_requests"], readonly ["billing"], readonly ["consumption_history"], readonly ["connection_uri"], readonly ["reveal_password"], readonly ["reset_password"], readonly ["credentials"], readonly ["realtime", "secret"], readonly ["rotate_secret"], readonly ["auth", "keys"], readonly ["auth", "webhooks"], readonly ["oauth_providers"], readonly ["email_server"], readonly ["email_provider"], readonly ["auth", "plugins"]];
+        readonly hint: "A project-scoped or organization API key from Settings > API keys; the Gateway sends it as a bearer token to console.neon.tech. It manages projects and branches; the database itself takes Postgres credentials, not this key.";
+        readonly secrets: readonly [{
+            readonly name: "NEON_API_KEY";
+            readonly hint: "A project-scoped or organization API key from Settings > API keys; a project-scoped key reaches one project only.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly path: "/api/v2/auth";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "Says which credential and identity the key is. Account-wide, so run it from the person's terminal.";
+        };
+        readonly rate: {
+            readonly perMinute: 700;
+            readonly note: "About 11 a second, with bursts of 40 a second per route.";
+        };
+        readonly example: "list my Neon projects and their branches";
+        readonly verified: {
+            readonly on: "2026-10-25";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["database", "postgres"];
+    };
+    readonly pinecone: {
+        readonly mode: "api_key";
+        readonly label: "Pinecone";
+        readonly description: "Vector database: indexes, namespaces, vectors and documents, plus hosted embedding and rerank.";
+        readonly auth: {
+            readonly kind: "header";
+            readonly secret: "PINECONE_API_KEY";
+            readonly header: "Api-Key";
+        };
+        readonly docs: "https://app.pinecone.io/organizations/-/projects/-/keys";
+        readonly api: "https://docs.pinecone.io/reference/api/introduction";
+        readonly hosts: readonly ["api.pinecone.io"];
+        readonly hostSetting: "PINECONE_HOST";
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["admin"], readonly ["api-keys"]];
+        readonly hint: "An API key from the project's API keys page and the host of the index the app uses; the Gateway sends the key in the Api-Key header to api.pinecone.io and that host. Query, search, embed and rerank are POSTs, so an app that uses them asks for write.";
+        readonly secrets: readonly [{
+            readonly name: "PINECONE_API_KEY";
+            readonly hint: "An API key from the project's API keys page in the Pinecone console.";
+        }, {
+            readonly name: "PINECONE_HOST";
+            readonly hint: "The host of the index the app uses, <index>-<id>.svc.<env>.pinecone.io, from describe_index or the console.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly host: "api.pinecone.io";
+            readonly path: "/indexes";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "Lists the project's indexes; the app sends X-Pinecone-Api-Version itself.";
+        };
+        readonly example: "list my Pinecone indexes and their dimensions";
+        readonly verified: {
+            readonly on: "2026-10-25";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["vector", "database", "search"];
+    };
+    readonly mapbox: {
+        readonly mode: "api_key";
+        readonly label: "Mapbox";
+        readonly description: "Maps and location: geocoding, directions, styles, tilesets and datasets.";
+        readonly auth: {
+            readonly kind: "query";
+            readonly secret: "MAPBOX_ACCESS_TOKEN";
+            readonly param: "access_token";
+        };
+        readonly docs: "https://console.mapbox.com/account/access-tokens/";
+        readonly api: "https://docs.mapbox.com/api/overview/";
+        readonly hosts: readonly ["api.mapbox.com"];
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PUT", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["tokens"]];
+        readonly hint: "An access token from Access tokens in the Mapbox console, with only the scopes the app needs; the Gateway adds it to every call as the access_token parameter.";
+        readonly secrets: readonly [{
+            readonly name: "MAPBOX_ACCESS_TOKEN";
+            readonly hint: "An access token with only the scopes the app needs, from Access tokens in the Mapbox console.";
+        }];
+        readonly rate: {
+            readonly note: "Per token and per API: Geocoding 1,000 a minute, Directions 300, Static Images 1,250; the Tokens API 100 a minute per account.";
+        };
+        readonly example: "turn a street address into map coordinates";
+        readonly verified: {
+            readonly on: "2026-10-25";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["maps", "geocoding", "location"];
+    };
+    readonly openweather: {
+        readonly mode: "api_key";
+        readonly label: "OpenWeather";
+        readonly description: "Weather data: current conditions, forecasts, One Call, history and weather map tiles.";
+        readonly auth: {
+            readonly kind: "query";
+            readonly secret: "OPENWEATHER_API_KEY";
+            readonly param: "appid";
+        };
+        readonly docs: "https://home.openweathermap.org/api_keys";
+        readonly api: "https://openweathermap.org/api";
+        readonly hosts: readonly ["api.openweathermap.org", "pro.openweathermap.org", "history.openweathermap.org", "tile.openweathermap.org", "maps.openweathermap.org"];
+        readonly data: "per-call";
+        readonly access: readonly ["read"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly accountWidePaths: readonly [readonly ["data", "3", "stations"], readonly ["data", "3", "measurements"]];
+        readonly hint: "An API key from the API keys tab of your OpenWeather account; the Gateway adds it to every call as the appid parameter. Paid products (hourly forecast, history, Weather Maps 2.0) need a plan that includes them.";
+        readonly secrets: readonly [{
+            readonly name: "OPENWEATHER_API_KEY";
+            readonly hint: "An API key from the API keys tab of the OpenWeather account; a new key can take up to two hours to activate.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly host: "api.openweathermap.org";
+            readonly path: "/data/2.5/weather?lat=51.51&lon=-0.13";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "Counts one call against the plan's quota; free within it. A bad or not yet active key answers 401.";
+        };
+        readonly cost: {
+            readonly unit: "call";
+            readonly note: "One Call API 3.0 includes 1,000 calls a day free, then is paid per call.";
+        };
+        readonly rate: {
+            readonly perMinute: 60;
+            readonly note: "The Free plan answers 429 past 60 calls a minute.";
+        };
+        readonly example: "get the current weather in Lisbon";
+        readonly verified: {
+            readonly on: "2026-10-25";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["weather", "forecast"];
+    };
+    readonly daytona: {
+        readonly mode: "api_key";
+        readonly label: "Daytona";
+        readonly description: "Sandboxes for running code: create, start, stop, archive and delete sandboxes, and manage their snapshots and volumes.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "DAYTONA_API_KEY";
+        };
+        readonly docs: "https://www.daytona.io/docs/en/api-keys/";
+        readonly api: "https://www.daytona.io/docs/en/tools/api/";
+        readonly hosts: readonly ["app.daytona.io"];
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PUT", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["organizations"], readonly ["organization"], readonly ["billing"], readonly ["api-keys"], readonly ["users"], readonly ["audit"], readonly ["webhooks"], readonly ["secret"], readonly ["docker-registry"], readonly ["object-storage"], readonly ["regions"], readonly ["runners"], readonly ["for-runner"], readonly ["jobs"], readonly ["warm-pools"], readonly ["preview"], readonly ["ssh-access", "validate"]];
+        readonly hint: "An API key from the Daytona dashboard's Keys page, with only the permissions the apps need; the Gateway sends it as a bearer token to app.daytona.io. Any key of an organization reaches every running sandbox in it, so give the Gateway a Daytona organization of its own.";
+        readonly secrets: readonly [{
+            readonly name: "DAYTONA_API_KEY";
+            readonly hint: "An API key from the Daytona dashboard's Keys page: write:sandboxes and delete:sandboxes (and the snapshot or volume ones) only if an app needs them, and never manage:api_keys, manage:secrets, manage:billing or the region and runner permissions.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly path: "/api/sandbox";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "Lists the organization's sandboxes; any key may read them.";
+        };
+        readonly example: "start a sandbox from my snapshot and stop it when the run is done";
+        readonly verified: {
+            readonly on: "2026-11-01";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["sandbox", "compute", "hosting"];
+    };
+};
+//# sourceMappingURL=infra.d.ts.map

package/dist/internal/catalog/infra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra.d.ts","sourceRoot":"","sources":["../../../src/internal/catalog/infra.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4mBmC,CAAC"}