@every-app/sdk 0.3.0-rc.1 → 0.3.0-rc.3

package/dist/cloudflare/worker.js

@@ -3,7 +3,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { parseEnv } from "node:util";
 import { DEV_ISSUER, DEV_PUBLIC_KEY_PEM } from "../dev/keypair.js";
-import { sentinelDeployTarget } from "./sentinel.js";
+import { sentinelDeployTarget, } from "./sentinel.js";
 /** The names of the manifest's `secrets`, whichever form each took. */
 function manifestSecretNames(manifest) {
     return (manifest.secrets ?? []).map((entry) => typeof entry === "string" ? entry : entry.name);
@@ -15,17 +15,28 @@ function manifestProviderIds(manifest) {
 /**
  * The gateway secrets holding the keys of the AI providers and capabilities
  * an app may ask for, with the settings a provider needs besides its key
- * (Workers AI's account). With no gateway in development, the SDK reaches
- * them with the developer's own values under the same names. A copy of the
- * tables in ../internal, which the Worker loads: the Vite plugin hides
- * whatever cloudflare.config.ts imports from the Worker. A test keeps them
- * in step.
+ * (Workers AI's account, a Basic username held as a setting, a host
+ * setting). With no gateway in development, the SDK reaches them with the
+ * developer's own values under the same names. A copy of the catalog's
+ * settings (`capabilitySettings()` over every entry of
+ * ../internal/capabilities.ts), which the Worker loads and this file must
+ * not import (see ./index.ts: the Vite plugin hides whatever
+ * cloudflare.config.ts imports from the Worker). worker.test.ts keeps the
+ * copy in step: a provider added to the catalog is added here.
  */
 const DEV_GATEWAY_KEYS = {
     providers: {
         openai: ["OPENAI_API_KEY"],
         openrouter: ["OPENROUTER_API_KEY"],
         "workers-ai": ["WORKERS_AI_API_TOKEN", "CLOUDFLARE_ACCOUNT_ID"],
+        // Not Cloudflare AI Gateway (the proxy entry): dev goes to the
+        // providers directly, so its settings are the Gateway's alone.
+        // The AI providers of ../internal/catalog/inference.ts.
+        anthropic: ["ANTHROPIC_API_KEY"],
+        gemini: ["GEMINI_API_KEY"],
+        mistral: ["MISTRAL_API_KEY"],
+        groq: ["GROQ_API_KEY"],
+        cohere: ["COHERE_API_KEY"],
     },
     capabilities: {
         dataforseo: ["DATAFORSEO_API_KEY"],
@@ -73,6 +84,57 @@ const DEV_GATEWAY_KEYS = {
             "GOOGLE_WORKSPACE_CLIENT_SECRET",
         ],
         "microsoft-365": ["MICROSOFT_365_CLIENT_ID", "MICROSOFT_365_CLIENT_SECRET"],
+        // The API-key providers of ../internal/catalog/*.ts, in catalog order:
+        // the key, then a Basic username held as a setting, then the host
+        // setting of a provider whose host is the operator's.
+        stripe: ["STRIPE_API_KEY"],
+        lemonsqueezy: ["LEMONSQUEEZY_API_KEY"],
+        paddle: ["PADDLE_API_KEY"],
+        shopify: ["SHOPIFY_API_TOKEN", "SHOPIFY_HOST"],
+        plaid: ["PLAID_SECRET"],
+        attio: ["ATTIO_API_KEY"],
+        hubspot: ["HUBSPOT_API_TOKEN"],
+        pipedrive: ["PIPEDRIVE_API_TOKEN"],
+        airtable: ["AIRTABLE_API_TOKEN"],
+        notion: ["NOTION_API_TOKEN"],
+        postmark: ["POSTMARK_API_TOKEN"],
+        sendgrid: ["SENDGRID_API_KEY"],
+        twilio: ["TWILIO_API_SECRET", "TWILIO_API_KEY"],
+        intercom: ["INTERCOM_API_TOKEN"],
+        crisp: ["CRISP_API_KEY", "CRISP_API_IDENTIFIER"],
+        linear: ["LINEAR_API_KEY"],
+        github: ["GITHUB_API_TOKEN"],
+        gitlab: ["GITLAB_API_TOKEN"],
+        vercel: ["VERCEL_API_TOKEN"],
+        cloudflare: ["CLOUDFLARE_PROVIDER_API_TOKEN"],
+        posthog: ["POSTHOG_PERSONAL_API_KEY"],
+        mixpanel: [
+            "MIXPANEL_SERVICE_ACCOUNT_SECRET",
+            "MIXPANEL_SERVICE_ACCOUNT_USERNAME",
+        ],
+        segment: ["SEGMENT_WRITE_KEY"],
+        supabase: ["SUPABASE_SECRET_KEY", "SUPABASE_HOST"],
+        turso: ["TURSO_API_TOKEN"],
+        "turso-db": ["TURSO_DB_AUTH_TOKEN", "TURSO_DB_HOST"],
+        neon: ["NEON_API_KEY"],
+        pinecone: ["PINECONE_API_KEY", "PINECONE_HOST"],
+        mapbox: ["MAPBOX_ACCESS_TOKEN"],
+        openweather: ["OPENWEATHER_API_KEY"],
+        voyage: ["VOYAGE_API_KEY"],
+        perplexity: ["PERPLEXITY_API_KEY"],
+        jina: ["JINA_API_KEY"],
+        replicate: ["REPLICATE_API_TOKEN"],
+        huggingface: ["HUGGINGFACE_API_TOKEN"],
+        firecrawl: ["FIRECRAWL_API_KEY"],
+        exa: ["EXA_API_KEY"],
+        tavily: ["TAVILY_API_KEY"],
+        serper: ["SERPER_API_KEY"],
+        "brave-search": ["BRAVE_SEARCH_API_KEY"],
+        apify: ["APIFY_API_TOKEN"],
+        deepgram: ["DEEPGRAM_API_KEY"],
+        elevenlabs: ["ELEVENLABS_API_KEY"],
+        assemblyai: ["ASSEMBLYAI_API_KEY"],
+        newsapi: ["NEWSAPI_API_KEY"],
     },
 };
 /**
@@ -194,6 +256,8 @@ function devProviderKeys(manifest, root) {
 }
 /** Cloudflare's limit on a Workflow's name. */
 const MAX_WORKFLOW_NAME_LENGTH = 64;
+/** Cloudflare's limit on a Vectorize index's name. */
+const MAX_VECTORIZE_NAME_LENGTH = 64;
 /** Cloudflare's limit on a Worker's name. */
 const MAX_WORKER_NAME_LENGTH = 63;
 /**
@@ -251,6 +315,10 @@ export function everyAppWorker(options) {
         addDevProviders(env, options.root);
     }
     Object.assign(env, storageBindings(manifest, name, deploy));
+    addAiBindings(env, manifest, deploy);
+    addBrowserBindings(env, manifest);
+    addImagesBindings(env, manifest);
+    addAiGatewayBindings(env, manifest, name, deploy);
     addDatabaseBindings(env, options, name, undefined, deploy);
     // The app binds every class, a helper Worker's in that Worker, and
     // exports only its own.
@@ -309,7 +377,8 @@ export function everyAppWorker(options) {
  * Build the definition of one of the app's helper Workers (the manifest's
  * `workers`), e.g. one that runs a memory-hungry job away from the app's
  * Worker. It is named `<app worker>--<worker>`, is private like the app, and
- * binds the app's D1 databases, KV namespaces and R2 buckets, the classes it defines, and
+ * binds the app's D1 databases, KV namespaces, R2 buckets, Workers AI, Browser Rendering and Images, the classes it defines, and
+ * binds the app's D1 databases, KV namespaces, R2 buckets, Workers AI, Browser Rendering and Vectorize indexes, the classes it defines, and
  * the gateway (with the app's identity, for capabilities). Only the app's
  * Worker reaches it. Pass it to the Vite plugin:
  *
@@ -344,6 +413,10 @@ export function everyAppAuxiliaryWorker(options) {
         env["EVERYAPP_DEV_CAPABILITIES"] = devCapabilities(manifest);
         addDevProviders(env, options.root);
     }
+    addAiBindings(env, manifest, deploy);
+    addBrowserBindings(env, manifest);
+    addImagesBindings(env, manifest);
+    addAiGatewayBindings(env, manifest, appWorker, deploy);
     addDatabaseBindings(env, options, appWorker, worker, deploy);
     const { bindings, exports } = classBindings(manifest, appWorker, worker, env);
     Object.assign(env, bindings);
@@ -410,8 +483,8 @@ function gatewayBinding(deploy, appId, appWorker) {
     };
 }
 /**
- * The app's D1 databases, KV namespaces and R2 buckets, which all its
- * Workers share.
+ * The app's D1 databases, KV namespaces, R2 buckets and Vectorize indexes,
+ * which all its Workers share.
  */
 function storageBindings(manifest, appWorker, deploy) {
     const env = {};
@@ -461,8 +534,90 @@ function storageBindings(manifest, appWorker, deploy) {
             env[binding] = { type: "r2", name: bucketNameFor(appWorker, binding) };
         }
     }
+    // Deployed, the index the deploy provisioned (a placeholder until
+    // installed); in development the account's index of the dev Worker's
+    // name, reached remotely: Cloudflare has no local Vectorize, so calls
+    // throw until the Vite plugin's remoteBindings is on.
+    for (const { name: binding } of manifest.resources?.vectorize ?? []) {
+        if (env[binding]) {
+            throw new Error(`vectorize: ${binding} reuses a binding name the Worker already has.`);
+        }
+        if (deploy) {
+            env[binding] = {
+                type: "vectorize",
+                name: provisioned(deploy.resources.vectorize, binding).name,
+            };
+            continue;
+        }
+        const index = suffixedName(appWorker, binding);
+        if (index.length > MAX_VECTORIZE_NAME_LENGTH) {
+            throw new Error(`vectorize: ${binding} would be the Vectorize index "${index}", longer than Cloudflare's ${MAX_VECTORIZE_NAME_LENGTH} characters; shorten the binding name.`);
+        }
+        env[binding] = { type: "vectorize", name: index, dev: { remote: true } };
+    }
     return env;
 }
+/**
+ * The manifest's Workers AI bindings, which every one of the app's Workers
+ * gets: `{ type: "ai" }` deployed (account-wide, nothing to provision), and
+ * marked remote in development, where Miniflare has no Workers AI. The
+ * remote mark does nothing until the app's Vite config sets
+ * `remoteBindings: true`, so turning that on is the one switch.
+ */
+function addAiBindings(env, manifest, deploy) {
+    for (const binding of manifest.resources?.ai ?? []) {
+        if (env[binding]) {
+            throw new Error(`ai: ${binding} reuses a binding name the Worker already has.`);
+        }
+        env[binding] = deploy
+            ? { type: "ai" }
+            : { type: "ai", dev: { remote: true } };
+    }
+}
+/**
+ * The manifest's Browser Rendering bindings, which every one of the app's
+ * Workers gets: `{ type: "browser" }` in both modes (account-wide,
+ * nothing to provision; Miniflare serves a local browser in development).
+ */
+function addBrowserBindings(env, manifest) {
+    for (const binding of manifest.resources?.browser ?? []) {
+        if (env[binding]) {
+            throw new Error(`browser: ${binding} reuses a binding name the Worker already has.`);
+        }
+        env[binding] = { type: "browser" };
+    }
+}
+/**
+ * The manifest's Images bindings, which every one of the app's Workers
+ * gets: `{ type: "images" }` in both modes (account-wide, nothing to
+ * provision; Miniflare answers it locally in development).
+ */
+function addImagesBindings(env, manifest) {
+    for (const binding of manifest.resources?.images ?? []) {
+        if (env[binding]) {
+            throw new Error(`images: ${binding} reuses a binding name the Worker already has.`);
+        }
+        env[binding] = { type: "images" };
+    }
+}
+/**
+ * The app's AI Gateways, which all its Workers share, each a `json`
+ * binding of `{ id, accountId, url }`. Deployed, the gateway the deploy
+ * provisioned (a placeholder until installed); in development the id the
+ * deploy's rule gives, with an empty account and URL: there is no gateway,
+ * so the app calls the provider directly.
+ */
+function addAiGatewayBindings(env, manifest, appWorker, deploy) {
+    for (const { name: binding } of manifest.resources?.aiGateway ?? []) {
+        if (env[binding]) {
+            throw new Error(`aiGateway: ${binding} reuses a binding name the Worker already has.`);
+        }
+        const value = deploy
+            ? { ...provisioned(deploy.resources.aiGateway, binding) }
+            : { id: aiGatewayIdFor(appWorker, binding), accountId: "", url: "" };
+        env[binding] = { type: "json", value };
+    }
+}
 /**
  * DATABASE_PROVIDER and the Hyperdrive configs one of the app's Workers
  * binds: each config every Worker shares, and those a helper (`forWorker`)
@@ -709,8 +864,9 @@ function workerNameFor(appId) {
 }
 /**
  * Copies of the gateway's naming rules (@every-app/perimeter/manifest's
- * resourceNameFor and bucketNameFor): `DB` and `KV` (`R2` for a bucket) take
- * the Worker's name, any other binding `<worker>--<binding>`.
+ * resourceNameFor, bucketNameFor and vectorizeNameFor): `DB` and `KV` (`R2`
+ * for a bucket) take the Worker's name, any other binding (and every
+ * Vectorize index) `<worker>--<binding>`.
  */
 function resourceNameFor(workerName, binding) {
     return binding === "DB" || binding === "KV"
@@ -723,6 +879,13 @@ function bucketNameFor(workerName, binding) {
 function suffixedName(workerName, binding) {
     return `${workerName}--${binding.toLowerCase().replaceAll("_", "-")}`;
 }
+/**
+ * A copy of the gateway's aiGatewayIdFor: one hyphen, since an AI
+ * Gateway's id may not hold `--`.
+ */
+function aiGatewayIdFor(workerName, binding) {
+    return `${workerName}-${binding.toLowerCase().replaceAll("_", "-")}`;
+}
 function assertAppId(id) {
     if (typeof id !== "string" || !/^[a-z]([a-z0-9-]*[a-z0-9])?$/.test(id)) {
         throw new Error(`everyapp.config.ts id must be kebab-case (lowercase letters, digits, hyphens); got ${JSON.stringify(id)}.`);

package/dist/internal/aiDefault.d.ts

@@ -0,0 +1,141 @@
+/**
+ * The Gateway's default model provider: what an app that says "I need a
+ * chat model" (manifest `ai: { chat: true }`, the SDK's `ai()`, the route
+ * `/api/ai/default/…`) is served (docs/design/2026-10-model-providers.md).
+ *
+ * The default is resolved, never assumed: the operator's choice when one
+ * is stored (`everyapp ai default <provider>[/<model>]`, Manage workspace
+ * → Usage → AI default), else the shipped order below, first provider
+ * whose Gateway settings are all set; with none set, the first of the
+ * order with the settings it needs, so "Needs setup" asks for one key.
+ * OpenRouter comes first because one key reaches many models; Workers AI
+ * second because it needs no provider account (the Gateway's own
+ * Cloudflare token), with weaker models; then the single-vendor keys.
+ * Cloudflare AI Gateway is never a default: it has no models of its own
+ * and fronts whichever provider the default resolves to when
+ * `AI_GATEWAY_ID` is set (./capabilities.ts, `aig`).
+ *
+ * Everything here is pure: what is set is asked of the caller (`isSet`),
+ * which reads the Gateway's env, the Worker's secret names, or `.dev.vars`.
+ */
+import { type AiProviderCapability, type AiRoute, type Capability, type CapabilityLookup } from "./capabilities.js";
+/** The reserved provider id apps call for the default: `/api/ai/default/…`. */
+export declare const AI_DEFAULT_PROVIDER = "default";
+/** The catalog id of Cloudflare AI Gateway, the proxy entry. */
+export declare const AI_GATEWAY_PROVIDER = "ai-gateway";
+/** The settings that make AI Gateway front the providers that have a slug. */
+export declare const AI_GATEWAY_SETTINGS: readonly ["AI_GATEWAY_ID", "CLOUDFLARE_ACCOUNT_ID"];
+/**
+ * The shipped order: the provider the default resolves to when the
+ * operator chose none, the first of these whose settings are set.
+ */
+export declare const AI_DEFAULT_ORDER: readonly string[];
+/** The model name an app sends to mean "the default's model". */
+export declare const AI_DEFAULT_MODEL = "default";
+/** The paths an app calls under `/api/ai/default`, OpenAI-shaped. */
+export declare const AI_DEFAULT_ROUTES: {
+    readonly chat: "/v1/chat/completions";
+    readonly embeddings: "/v1/embeddings";
+};
+export type AiDefaultRoute = keyof typeof AI_DEFAULT_ROUTES;
+/** What the operator stored: a provider, and the model to fill in when the app names none. */
+export interface AiDefaultChoice {
+    provider: string;
+    model?: string;
+}
+/**
+ * `openrouter` or `openrouter/anthropic/claude-haiku-5.5` as a choice:
+ * the provider id up to the first slash, the model after it (a model id
+ * may hold slashes of its own). Null for blank or malformed text.
+ */
+export declare function parseAiDefaultChoice(value: string | null | undefined): AiDefaultChoice | null;
+/** The stored text of a choice: `provider` or `provider/model`. */
+export declare function formatAiDefaultChoice(choice: AiDefaultChoice): string;
+/** Whether `name` holds a value, as the Gateway's env or a secret list says. */
+export type IsSet = (name: string) => boolean;
+/** An `ai` entry the default may resolve to: not the proxy, with a chat route. */
+export type AiDefaultCapability = AiProviderCapability & {
+    chat: AiRoute;
+};
+export declare function canBeAiDefault(capability: Capability | undefined): capability is AiDefaultCapability;
+/**
+ * The Gateway settings an `ai` entry needs before it serves: its key
+ * (unless the entry works without one, `authOptional`) and what its URL
+ * needs besides (`alsoNeeds`).
+ */
+export declare function aiRequiredSettings(capability: AiProviderCapability): string[];
+/** Whether every setting the entry needs is set. */
+export declare function aiProviderConfigured(capability: AiProviderCapability, isSet: IsSet): boolean;
+/** Whether AI Gateway fronts calls: its id and the account are set. */
+export declare function aiGatewayConfigured(isSet: IsSet): boolean;
+/** Whether a call to `capability` goes through AI Gateway: it is configured and the entry has a slug. */
+export declare function viaAiGateway(capability: AiProviderCapability, isSet: IsSet): boolean;
+/** One provider the default may resolve to, with its state on this Gateway. */
+export interface AiDefaultCandidate {
+    id: string;
+    label: string;
+    /** The Gateway settings it needs; what to set when it isn't configured. */
+    settings: string[];
+    configured: boolean;
+    /** The model the Gateway fills in when the app names none. */
+    model: string;
+    /** Through Cloudflare AI Gateway, as things are set now. */
+    viaAiGateway: boolean;
+    embeddings: boolean;
+}
+/** Where the resolved default came from. */
+export type AiDefaultSource = 
+/** The operator's stored choice. */
+"setting"
+/** The shipped order: the first provider that is configured. */
+ | "order"
+/** Nothing is configured: the first of the order, with what to set. */
+ | "none";
+export interface AiDefaultResolution {
+    provider: string;
+    label: string;
+    /** The model the default serves: the choice's, else the entry's. */
+    model: string;
+    source: AiDefaultSource;
+    /** Every setting the provider needs is set, so the default serves. */
+    configured: boolean;
+    /** The Gateway settings the provider needs: what to set when it isn't configured. */
+    settings: string[];
+    via: "ai-gateway" | "direct";
+    chat: AiRoute;
+    embeddings?: AiRoute;
+    /** Every provider the default could be, in the shipped order, the choice first. */
+    candidates: AiDefaultCandidate[];
+    /**
+     * The stored choice names something the default can't be (an id the
+     * catalog doesn't have, an entry with no chat route, the proxy): the
+     * order decided instead, and this says why.
+     */
+    problem?: string;
+}
+/**
+ * Every provider the default may resolve to: the shipped order first,
+ * then any other `ai` entry of `lookup` with a chat route (a registered
+ * row, one day), each with its state.
+ */
+export declare function aiDefaultCandidates(isSet: IsSet, lookup?: CapabilityLookup): AiDefaultCandidate[];
+/** Why `choice.provider` can't be the default, or null when it can. */
+export declare function aiDefaultChoiceProblem(choice: AiDefaultChoice, lookup?: CapabilityLookup): string | null;
+/**
+ * The Gateway's effective default, from the stored choice (or none) and
+ * what is set. A choice that names a provider which isn't configured
+ * still wins (the operator chose it: `configured` is false and `settings`
+ * says what to set); a choice the default can't be is reported as
+ * `problem` and the order decides.
+ */
+export declare function resolveAiDefault(input: {
+    choice: AiDefaultChoice | null;
+    isSet: IsSet;
+    lookup?: CapabilityLookup;
+}): AiDefaultResolution;
+/**
+ * The sentence setup shows for an unconfigured default: the one key to
+ * set, and the alternatives in the order.
+ */
+export declare function aiDefaultSetupHint(resolution: AiDefaultResolution): string;
+//# sourceMappingURL=aiDefault.d.ts.map

package/dist/internal/aiDefault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiDefault.d.ts","sourceRoot":"","sources":["../../src/internal/aiDefault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAE3B,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAE7C,gEAAgE;AAChE,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAEhD,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,qDAGtB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAQ7C,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAE1C,qEAAqE;AACrE,eAAO,MAAM,iBAAiB;;;CAGpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAE5D,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,eAAe,GAAG,IAAI,CAMxB;AAED,mEAAmE;AACnE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAErE;AAED,gFAAgF;AAChF,MAAM,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;AAE9C,kFAAkF;AAClF,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3E,wBAAgB,cAAc,CAC5B,UAAU,EAAE,UAAU,GAAG,SAAS,GACjC,UAAU,IAAI,mBAAmB,CAMnC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,oBAAoB,GAAG,MAAM,EAAE,CAK7E;AAED,oDAAoD;AACpD,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,oBAAoB,EAChC,KAAK,EAAE,KAAK,GACX,OAAO,CAET;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAEzD;AAED,yGAAyG;AACzG,wBAAgB,YAAY,CAC1B,UAAU,EAAE,oBAAoB,EAChC,KAAK,EAAE,KAAK,GACX,OAAO,CAET;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,4CAA4C;AAC5C,MAAM,MAAM,eAAe;AACzB,oCAAoC;AAClC,SAAS;AACX,gEAAgE;GAC9D,OAAO;AACT,uEAAuE;GACrE,MAAM,CAAC;AAEX,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,UAAU,EAAE,OAAO,CAAC;IACpB,qFAAqF;IACrF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,GAAG,EAAE,YAAY,GAAG,QAAQ,CAAC;IAC7B,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAkBD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,KAAK,EACZ,MAAM,GAAE,gBAA0B,GACjC,kBAAkB,EAAE,CAWtB;AAED,uEAAuE;AACvE,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,eAAe,EACvB,MAAM,GAAE,gBAA0B,GACjC,MAAM,GAAG,IAAI,CAcf;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B,GAAG,mBAAmB,CAuDtB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,mBAAmB,GAAG,MAAM,CAc1E"}

package/dist/internal/aiDefault.js

@@ -0,0 +1,204 @@
+/**
+ * The Gateway's default model provider: what an app that says "I need a
+ * chat model" (manifest `ai: { chat: true }`, the SDK's `ai()`, the route
+ * `/api/ai/default/…`) is served (docs/design/2026-10-model-providers.md).
+ *
+ * The default is resolved, never assumed: the operator's choice when one
+ * is stored (`everyapp ai default <provider>[/<model>]`, Manage workspace
+ * → Usage → AI default), else the shipped order below, first provider
+ * whose Gateway settings are all set; with none set, the first of the
+ * order with the settings it needs, so "Needs setup" asks for one key.
+ * OpenRouter comes first because one key reaches many models; Workers AI
+ * second because it needs no provider account (the Gateway's own
+ * Cloudflare token), with weaker models; then the single-vendor keys.
+ * Cloudflare AI Gateway is never a default: it has no models of its own
+ * and fronts whichever provider the default resolves to when
+ * `AI_GATEWAY_ID` is set (./capabilities.ts, `aig`).
+ *
+ * Everything here is pure: what is set is asked of the caller (`isSet`),
+ * which reads the Gateway's env, the Worker's secret names, or `.dev.vars`.
+ */
+import { CATALOG, } from "./capabilities.js";
+/** The reserved provider id apps call for the default: `/api/ai/default/…`. */
+export const AI_DEFAULT_PROVIDER = "default";
+/** The catalog id of Cloudflare AI Gateway, the proxy entry. */
+export const AI_GATEWAY_PROVIDER = "ai-gateway";
+/** The settings that make AI Gateway front the providers that have a slug. */
+export const AI_GATEWAY_SETTINGS = [
+    "AI_GATEWAY_ID",
+    "CLOUDFLARE_ACCOUNT_ID",
+];
+/**
+ * The shipped order: the provider the default resolves to when the
+ * operator chose none, the first of these whose settings are set.
+ */
+export const AI_DEFAULT_ORDER = [
+    "openrouter",
+    "workers-ai",
+    "openai",
+    "anthropic",
+    "groq",
+    "mistral",
+    "gemini",
+];
+/** The model name an app sends to mean "the default's model". */
+export const AI_DEFAULT_MODEL = "default";
+/** The paths an app calls under `/api/ai/default`, OpenAI-shaped. */
+export const AI_DEFAULT_ROUTES = {
+    chat: "/v1/chat/completions",
+    embeddings: "/v1/embeddings",
+};
+/** A stored choice must name a provider id; the model is free text after the first slash. */
+const CHOICE = /^([a-z][a-z0-9-]{1,39})(?:\/(.{1,200}))?$/;
+/**
+ * `openrouter` or `openrouter/anthropic/claude-haiku-5.5` as a choice:
+ * the provider id up to the first slash, the model after it (a model id
+ * may hold slashes of its own). Null for blank or malformed text.
+ */
+export function parseAiDefaultChoice(value) {
+    if (typeof value !== "string")
+        return null;
+    const match = CHOICE.exec(value.trim());
+    if (!match)
+        return null;
+    const model = match[2]?.trim();
+    return model ? { provider: match[1], model } : { provider: match[1] };
+}
+/** The stored text of a choice: `provider` or `provider/model`. */
+export function formatAiDefaultChoice(choice) {
+    return choice.model ? `${choice.provider}/${choice.model}` : choice.provider;
+}
+export function canBeAiDefault(capability) {
+    return (capability?.mode === "ai" &&
+        capability.kind !== "proxy" &&
+        capability.chat !== undefined);
+}
+/**
+ * The Gateway settings an `ai` entry needs before it serves: its key
+ * (unless the entry works without one, `authOptional`) and what its URL
+ * needs besides (`alsoNeeds`).
+ */
+export function aiRequiredSettings(capability) {
+    return [
+        ...(capability.authOptional ? [] : [capability.auth.secret]),
+        ...(capability.alsoNeeds ?? []),
+    ];
+}
+/** Whether every setting the entry needs is set. */
+export function aiProviderConfigured(capability, isSet) {
+    return aiRequiredSettings(capability).every((name) => isSet(name));
+}
+/** Whether AI Gateway fronts calls: its id and the account are set. */
+export function aiGatewayConfigured(isSet) {
+    return AI_GATEWAY_SETTINGS.every((name) => isSet(name));
+}
+/** Whether a call to `capability` goes through AI Gateway: it is configured and the entry has a slug. */
+export function viaAiGateway(capability, isSet) {
+    return capability.aig !== undefined && aiGatewayConfigured(isSet);
+}
+function candidateOf(id, capability, isSet) {
+    return {
+        id,
+        label: capability.label,
+        settings: aiRequiredSettings(capability),
+        configured: aiProviderConfigured(capability, isSet),
+        model: capability.chat.model,
+        viaAiGateway: viaAiGateway(capability, isSet),
+        embeddings: capability.embeddings !== undefined,
+    };
+}
+/**
+ * Every provider the default may resolve to: the shipped order first,
+ * then any other `ai` entry of `lookup` with a chat route (a registered
+ * row, one day), each with its state.
+ */
+export function aiDefaultCandidates(isSet, lookup = CATALOG) {
+    const ids = [
+        ...AI_DEFAULT_ORDER,
+        ...lookup.ids().filter((id) => !AI_DEFAULT_ORDER.includes(id)),
+    ];
+    return ids.flatMap((id) => {
+        const capability = lookup.get(id);
+        return canBeAiDefault(capability)
+            ? [candidateOf(id, capability, isSet)]
+            : [];
+    });
+}
+/** Why `choice.provider` can't be the default, or null when it can. */
+export function aiDefaultChoiceProblem(choice, lookup = CATALOG) {
+    const capability = lookup.get(choice.provider);
+    if (!capability)
+        return `${choice.provider} isn't a provider this Gateway knows`;
+    if (capability.mode !== "ai") {
+        return `${choice.provider} is an API provider, not a model provider`;
+    }
+    if (capability.kind === "proxy") {
+        return `${capability.label} fronts the model providers and serves no models of its own; set a provider, and turn the gateway on with everyapp ai gateway on`;
+    }
+    if (!capability.chat) {
+        return `${capability.label} has no OpenAI-shaped chat route, so it can't serve the default; an app pins it by listing it under providers`;
+    }
+    return null;
+}
+/**
+ * The Gateway's effective default, from the stored choice (or none) and
+ * what is set. A choice that names a provider which isn't configured
+ * still wins (the operator chose it: `configured` is false and `settings`
+ * says what to set); a choice the default can't be is reported as
+ * `problem` and the order decides.
+ */
+export function resolveAiDefault(input) {
+    const lookup = input.lookup ?? CATALOG;
+    const { isSet } = input;
+    const candidates = aiDefaultCandidates(isSet, lookup);
+    const resolve = (id, capability, source, model, problem) => ({
+        provider: id,
+        label: capability.label,
+        model: model ?? capability.chat.model,
+        source,
+        configured: aiProviderConfigured(capability, isSet),
+        settings: aiRequiredSettings(capability),
+        via: viaAiGateway(capability, isSet) ? "ai-gateway" : "direct",
+        chat: capability.chat,
+        ...(capability.embeddings ? { embeddings: capability.embeddings } : {}),
+        candidates: [
+            ...candidates.filter((candidate) => candidate.id === id),
+            ...candidates.filter((candidate) => candidate.id !== id),
+        ],
+        ...(problem ? { problem } : {}),
+    });
+    let problem;
+    if (input.choice) {
+        const capability = lookup.get(input.choice.provider);
+        const why = aiDefaultChoiceProblem(input.choice, lookup);
+        if (!why && canBeAiDefault(capability)) {
+            return resolve(input.choice.provider, capability, "setting", input.choice.model);
+        }
+        problem = why ?? undefined;
+    }
+    const configured = candidates.find((candidate) => candidate.configured);
+    const first = configured ?? candidates[0];
+    if (!first) {
+        throw new Error("the catalog has no AI provider with a chat route");
+    }
+    const capability = lookup.get(first.id);
+    if (!canBeAiDefault(capability))
+        throw new Error("unreachable");
+    return resolve(first.id, capability, configured ? "order" : "none", undefined, problem);
+}
+/**
+ * The sentence setup shows for an unconfigured default: the one key to
+ * set, and the alternatives in the order.
+ */
+export function aiDefaultSetupHint(resolution) {
+    const others = resolution.candidates
+        .filter((candidate) => candidate.id !== resolution.provider)
+        .slice(0, 3)
+        .map((candidate) => `${candidate.label} (${candidate.settings.join(" and ")})`);
+    const head = resolution.source === "setting"
+        ? `The Gateway's default model provider is ${resolution.label}; set ${resolution.settings.join(" and ")}.`
+        : `Any one model provider's key makes the app work; ${resolution.label} is first in the order: set ${resolution.settings.join(" and ")}.`;
+    return others.length > 0
+        ? `${head} Or another: ${others.join(", ")}; pick one with everyapp ai default <provider>.`
+        : head;
+}

package/dist/internal/aiProviders.d.ts

@@ -7,9 +7,12 @@
  * this derives the fallback's view of each, and holds the one response
  * rewrite the gateway has (Workers AI's numeric tokens).
  */
-import { type AiProviderCapability, type AiProviderId, type ApiKeyAuth, type CapabilitySettings } from "./capabilities.js";
+import { type AiProviderCapability, type AiProviderId, type AiRoute, type ApiKeyAuth, type CapabilitySettings } from "./capabilities.js";
 export interface DevAiProviderSpec {
     origin: string;
+    /** The routes the default maps onto in dev, with the model filled in (the entry's `chat` and `embeddings`). */
+    chat?: AiRoute;
+    embeddings?: AiRoute;
     /** The gateway secret holding the provider key; in local dev, the `.dev.vars` name. */
     keyEnv: string;
     /** Where the key goes on a request (`authorizationOf`). */

package/dist/internal/aiProviders.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiProviders.d.ts","sourceRoot":"","sources":["../../src/internal/aiProviders.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,IAAI,EAAE,UAAU,CAAC;IACjB,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC;IAClE,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,KAAK,QAAQ,CAAC;CACpE;AAED,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC;AAEzC,qDAAqD;AACrD,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,oBAAoB,GAC/B,iBAAiB,CAkBnB;AAED,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC,MAAM,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAQG,CAAC;AAE9C,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAIzE;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,GAAG,IAAI,CAcf;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,GAAG,IAAI,CAIf;AAED,6DAA6D;AAC7D,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,SAAK,GACV,GAAG,GAAG,IAAI,CAOZ;AAWD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,GACjB,QAAQ,CAqBV"}
+{"version":3,"file":"aiProviders.d.ts","sourceRoot":"","sources":["../../src/internal/aiProviders.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,+GAA+G;IAC/G,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,IAAI,EAAE,UAAU,CAAC;IACjB,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC;IAClE,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,KAAK,QAAQ,CAAC;CACpE;AAED,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC;AAEzC,qDAAqD;AACrD,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,oBAAoB,GAC/B,iBAAiB,CAoBnB;AAED,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC,MAAM,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAUG,CAAC;AAE9C,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAIzE;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,GAAG,IAAI,CAcf;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,GAAG,IAAI,CAIf;AAED,6DAA6D;AAC7D,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,SAAK,GACV,GAAG,GAAG,IAAI,CAOZ;AAWD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,GACjB,QAAQ,CAqBV"}

package/dist/internal/aiProviders.js

@@ -13,6 +13,8 @@ export function devAiProviderSpec(capability) {
     const { basePath, normalize } = capability;
     return {
         origin: capability.origin,
+        ...(capability.chat ? { chat: capability.chat } : {}),
+        ...(capability.embeddings ? { embeddings: capability.embeddings } : {}),
         keyEnv: capability.auth.secret,
         auth: capability.auth,
         docs: capability.docs,
@@ -30,7 +32,9 @@ export function devAiProviderSpec(capability) {
 }
 export const DEV_AI_PROVIDERS = Object.fromEntries(CAPABILITY_IDS.flatMap((id) => {
     const capability = CAPABILITIES[id];
-    return capability.mode === "ai"
+    // The proxy entry (AI Gateway) serves no models: never a dev target.
+    return capability.mode === "ai" &&
+        !("kind" in capability && capability.kind === "proxy")
         ? [[id, devAiProviderSpec(capability)]]
         : [];
 }));