@every-app/sdk 0.3.0-rc.4 → 0.3.0-rc.5

package/dist/cloudflare/worker.js

@@ -3,6 +3,10 @@ import fs from "node:fs";
 import path from "node:path";
 import { parseEnv } from "node:util";
 import { DEV_ISSUER, DEV_ORG_ID, DEV_PUBLIC_KEY_PEM } from "../dev/keypair.js";
+// The catalog's settings, generated from ../internal/capabilities.ts, which
+// this file must not import (see ./index.ts: the Vite plugin hides whatever
+// cloudflare.config.ts imports from the Worker).
+import { DEV_GATEWAY_KEYS } from "./catalogSettings.generated.js";
 import { sentinelDeployTarget, } from "./sentinel.js";
 /** The names of the manifest's `secrets`, whichever form each took. */
 function manifestSecretNames(manifest) {
@@ -12,131 +16,6 @@ function manifestSecretNames(manifest) {
 function manifestProviderIds(manifest) {
     return (manifest.providers ?? []).map((entry) => typeof entry === "string" ? entry : entry.id);
 }
-/**
- * The gateway secrets holding the keys of the AI providers and capabilities
- * an app may ask for, with the settings a provider needs besides its key
- * (Workers AI's account, a Basic username held as a setting, a host
- * setting). With no gateway in development, the SDK reaches them with the
- * developer's own values under the same names. A copy of the catalog's
- * settings (`capabilitySettings()` over every entry of
- * ../internal/capabilities.ts), which the Worker loads and this file must
- * not import (see ./index.ts: the Vite plugin hides whatever
- * cloudflare.config.ts imports from the Worker). worker.test.ts keeps the
- * copy in step: a provider added to the catalog is added here.
- */
-const DEV_GATEWAY_KEYS = {
-    providers: {
-        openai: ["OPENAI_API_KEY"],
-        openrouter: ["OPENROUTER_API_KEY"],
-        "workers-ai": ["WORKERS_AI_API_TOKEN", "CLOUDFLARE_ACCOUNT_ID"],
-        // Not Cloudflare AI Gateway (the proxy entry): dev goes to the
-        // providers directly, so its settings are the Gateway's alone.
-        // The AI providers of ../internal/catalog/inference.ts.
-        anthropic: ["ANTHROPIC_API_KEY"],
-        gemini: ["GEMINI_API_KEY"],
-        mistral: ["MISTRAL_API_KEY"],
-        groq: ["GROQ_API_KEY"],
-        cohere: ["COHERE_API_KEY"],
-    },
-    capabilities: {
-        dataforseo: ["DATAFORSEO_API_KEY"],
-        context: ["CONTEXT_API_KEY"],
-        // The sender, and the developer's own Email Sending account: set all
-        // but the name and sendEmail() really sends; otherwise it prints.
-        // Resend's key and EMAIL_PROVIDER pick the provider integrationStatus()
-        // names, as the gateway would.
-        // TODO(integration): the last two added by the email-providers lane
-        // (this file is outside its ownership list).
-        email: [
-            "EMAIL_FROM",
-            "EMAIL_FROM_NAME",
-            "EMAIL_REST_API_TOKEN",
-            "CLOUDFLARE_ACCOUNT_ID",
-            "RESEND_API_KEY",
-            "EMAIL_PROVIDER",
-        ],
-        // The organization's members: nothing to set; listMembers() answers
-        // from the dev identity.
-        members: [],
-        // OAuth clients: the id, the secret, and the instance a provider with
-        // no fixed host is on.
-        linkedin: ["LINKEDIN_CLIENT_ID", "LINKEDIN_CLIENT_SECRET"],
-        facebook: ["FACEBOOK_APP_ID", "FACEBOOK_APP_SECRET"],
-        instagram: ["INSTAGRAM_APP_ID", "INSTAGRAM_APP_SECRET"],
-        threads: ["THREADS_APP_ID", "THREADS_APP_SECRET"],
-        youtube: ["YOUTUBE_CLIENT_ID", "YOUTUBE_CLIENT_SECRET"],
-        tiktok: ["TIKTOK_CLIENT_ID", "TIKTOK_CLIENT_SECRET"],
-        "tiktok-business": [
-            "TIKTOK_BUSINESS_CLIENT_ID",
-            "TIKTOK_BUSINESS_CLIENT_SECRET",
-        ],
-        reddit: ["REDDIT_CLIENT_ID", "REDDIT_CLIENT_SECRET"],
-        pinterest: ["PINTEREST_CLIENT_ID", "PINTEREST_CLIENT_SECRET"],
-        discord: ["DISCORD_CLIENT_ID", "DISCORD_CLIENT_SECRET"],
-        slack: ["SLACK_CLIENT_ID", "SLACK_CLIENT_SECRET"],
-        mastodon: ["MASTODON_CLIENT_ID", "MASTODON_CLIENT_SECRET", "MASTODON_URL"],
-        kick: ["KICK_CLIENT_ID", "KICK_CLIENT_SECRET"],
-        twitch: ["TWITCH_CLIENT_ID", "TWITCH_CLIENT_SECRET"],
-        tumblr: ["TUMBLR_CLIENT_ID", "TUMBLR_CLIENT_SECRET"],
-        dribbble: ["DRIBBBLE_CLIENT_ID", "DRIBBBLE_CLIENT_SECRET"],
-        "google-workspace": [
-            "GOOGLE_WORKSPACE_CLIENT_ID",
-            "GOOGLE_WORKSPACE_CLIENT_SECRET",
-        ],
-        "microsoft-365": ["MICROSOFT_365_CLIENT_ID", "MICROSOFT_365_CLIENT_SECRET"],
-        // The API-key providers of ../internal/catalog/*.ts, in catalog order:
-        // the key, then a Basic username held as a setting, then the host
-        // setting of a provider whose host is the operator's.
-        stripe: ["STRIPE_API_KEY"],
-        lemonsqueezy: ["LEMONSQUEEZY_API_KEY"],
-        paddle: ["PADDLE_API_KEY"],
-        shopify: ["SHOPIFY_API_TOKEN", "SHOPIFY_HOST"],
-        plaid: ["PLAID_SECRET"],
-        attio: ["ATTIO_API_KEY"],
-        hubspot: ["HUBSPOT_API_TOKEN"],
-        pipedrive: ["PIPEDRIVE_API_TOKEN"],
-        airtable: ["AIRTABLE_API_TOKEN"],
-        notion: ["NOTION_API_TOKEN"],
-        postmark: ["POSTMARK_API_TOKEN"],
-        sendgrid: ["SENDGRID_API_KEY"],
-        twilio: ["TWILIO_API_SECRET", "TWILIO_API_KEY"],
-        intercom: ["INTERCOM_API_TOKEN"],
-        crisp: ["CRISP_API_KEY", "CRISP_API_IDENTIFIER"],
-        linear: ["LINEAR_API_KEY"],
-        github: ["GITHUB_API_TOKEN"],
-        gitlab: ["GITLAB_API_TOKEN"],
-        vercel: ["VERCEL_API_TOKEN"],
-        cloudflare: ["CLOUDFLARE_PROVIDER_API_TOKEN"],
-        posthog: ["POSTHOG_PERSONAL_API_KEY"],
-        mixpanel: [
-            "MIXPANEL_SERVICE_ACCOUNT_SECRET",
-            "MIXPANEL_SERVICE_ACCOUNT_USERNAME",
-        ],
-        segment: ["SEGMENT_WRITE_KEY"],
-        supabase: ["SUPABASE_SECRET_KEY", "SUPABASE_HOST"],
-        turso: ["TURSO_API_TOKEN"],
-        "turso-db": ["TURSO_DB_AUTH_TOKEN", "TURSO_DB_HOST"],
-        neon: ["NEON_API_KEY"],
-        pinecone: ["PINECONE_API_KEY", "PINECONE_HOST"],
-        mapbox: ["MAPBOX_ACCESS_TOKEN"],
-        openweather: ["OPENWEATHER_API_KEY"],
-        voyage: ["VOYAGE_API_KEY"],
-        perplexity: ["PERPLEXITY_API_KEY"],
-        jina: ["JINA_API_KEY"],
-        replicate: ["REPLICATE_API_TOKEN"],
-        huggingface: ["HUGGINGFACE_API_TOKEN"],
-        firecrawl: ["FIRECRAWL_API_KEY"],
-        exa: ["EXA_API_KEY"],
-        tavily: ["TAVILY_API_KEY"],
-        serper: ["SERPER_API_KEY"],
-        "brave-search": ["BRAVE_SEARCH_API_KEY"],
-        apify: ["APIFY_API_TOKEN"],
-        deepgram: ["DEEPGRAM_API_KEY"],
-        elevenlabs: ["ELEVENLABS_API_KEY"],
-        assemblyai: ["ASSEMBLYAI_API_KEY"],
-        newsapi: ["NEWSAPI_API_KEY"],
-    },
-};
 /**
  * Observability every Every App Worker ships with: logs (with invocation
  * logs), sampled traces and Workers Issues, with query strings redacted so
@@ -166,6 +45,19 @@ const BUILD_ENV = "EVERYAPP_BUILD";
 const RESERVED_SECRET_NAME = /^(GATEWAY_URL|CF_VERSION_METADATA|EVERYAPP_\w*|EVERY_APP_\w*|APP__\w*)$/i;
 const GATEWAY_WORKER_NAME = "every-app-gateway";
 const GATEWAY_ENTRYPOINT = "AppGateway";
+/**
+ * Where `everyapp dev` serves its launcher, which it passes to the app's dev
+ * server in EVERYAPP_DEV_GATEWAY_URL; its default address otherwise. The
+ * deployed Worker gets the Gateway's URL from the deploy instead.
+ */
+const DEV_GATEWAY_URL_ENV = "EVERYAPP_DEV_GATEWAY_URL";
+const DEFAULT_DEV_GATEWAY_URL = "http://localhost:8787";
+function devGatewayUrl() {
+    return {
+        type: "text",
+        value: process.env[DEV_GATEWAY_URL_ENV] || DEFAULT_DEV_GATEWAY_URL,
+    };
+}
 /**
  * The manifest's `capabilities` as the SDK's local-dev twin of the gateway
  * reads them: with no gateway to hold an OAuth client's calls to the scope
@@ -177,7 +69,7 @@ function devCapabilities(manifest) {
 /**
  * The binding the dev Worker gets the specs of providers registered on a
  * gateway in (`DEV_PROVIDERS_ENV` in ../internal/devProviders.ts; a copy,
- * kept in step by a test, for the reason {@link DEV_GATEWAY_KEYS} is one).
+ * kept in step by a test, since this file may not import ../internal).
  */
 const DEV_PROVIDERS_ENV = "EVERYAPP_DEV_PROVIDERS";
 /**
@@ -291,6 +183,12 @@ export function everyAppWorker(options) {
     const { deploy, name } = appWorkerName(options, "everyAppWorker");
     const env = {
         EVERYAPP_APP_ID: { type: "text", value: manifest.id },
+        // The manifest itself, for a page that shows what the app asked for:
+        // the Worker can't import everyapp.config.ts (see ./index.ts).
+        EVERYAPP_MANIFEST: {
+            type: "json",
+            value: manifest,
+        },
         CF_VERSION_METADATA: { type: "version-metadata" },
     };
     if (deploy) {
@@ -317,6 +215,7 @@ export function everyAppWorker(options) {
             value: JSON.stringify([DEV_PUBLIC_KEY_PEM]),
         };
         env["EVERYAPP_IDENTITY_ISSUER"] = { type: "text", value: DEV_ISSUER };
+        env["GATEWAY_URL"] = devGatewayUrl();
         // The stub gateway's organization, as the deploy's secret would be, so
         // background work's withOrganization(env.EVERY_APP_ORG_ID, …) runs
         // here too. Not a pin: under the dev opt-in everyApp() enforces none,
@@ -436,6 +335,7 @@ export function everyAppAuxiliaryWorker(options) {
     else {
         env["EVERYAPP_DEV"] = { type: "text", value: "1" };
         env["EVERYAPP_DEV_CAPABILITIES"] = devCapabilities(manifest);
+        env["GATEWAY_URL"] = devGatewayUrl();
         env["EVERY_APP_ORG_ID"] = { type: "text", value: DEV_ORG_ID };
         addDevProviders(env, options.root);
     }

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @every-app/sdk — what `everyapp.config.ts` imports: `defineEveryApp` and
+ * the manifest's types. A leaf, like the config itself (see ./manifest.ts).
+ */
+export { defineEveryApp, type EveryAppCapabilityEntry, type EveryAppClassResource, type EveryAppManifest, type EveryAppPublicRoute, type EveryAppQueueConsumer, type EveryAppResources, type EveryAppSecretEntry, type EveryAppSettingNeed, type EveryAppWorkerLimits, } from "./manifest.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,cAAc,EACd,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+/**
+ * @every-app/sdk — what `everyapp.config.ts` imports: `defineEveryApp` and
+ * the manifest's types. A leaf, like the config itself (see ./manifest.ts).
+ */
+export { defineEveryApp, } from "./manifest.js";

package/dist/internal/gatewaySettings.d.ts

@@ -52,7 +52,13 @@ export declare function isSettableGatewaySetting(name: string): boolean;
  * are typed and check their shape; anything else is a credential and
  * stays hidden.
  */
-export declare const PLAIN_GATEWAY_SETTINGS: readonly ["EMAIL_FROM", "EMAIL_FROM_NAME", "EMAIL_PROVIDER", "EMAIL_PASSWORD_SIGN_IN", "MASTODON_URL", "AI_PROXY_EXTRA_ROUTES", "MCP_OAUTH_ENABLED", "MCP_DCR_ENABLED", "MCP_ALLOWED_ORIGINS", "MCP_AUDIT_RETENTION_DAYS", "CLOUDFLARE_ACCESS_OIDC_ISSUER", "CLOUDFLARE_ACCESS_OIDC_CLIENT_ID", "CLOUDFLARE_ACCESS_OIDC_LABEL", "CLOUDFLARE_ACCESS_TEAM_DOMAIN", "CLOUDFLARE_ACCESS_AUD", "CLOUDFLARE_ACCESS_APPS_AUD", "CLOUDFLARE_ACCESS_AUTO_JOIN_DOMAINS", "CLOUDFLARE_ACCESS_OUTER_RING_AUTO_JOIN", "HOSTED_OPEN_SIGNUP", "BROWSER_APP_INSTALLS", "DISPATCH_NAMESPACE", "THIRD_PARTY_DOMAIN", "EVENTS_ALLOW_PRIVATE_TARGETS"];
+export declare const PLAIN_GATEWAY_SETTINGS: readonly ["EMAIL_FROM", "EMAIL_FROM_NAME", "EMAIL_PROVIDER", "EMAIL_PASSWORD_SIGN_IN", "AI_PROXY_EXTRA_ROUTES", "MCP_OAUTH_ENABLED", "MCP_DCR_ENABLED", "MCP_ALLOWED_ORIGINS", "MCP_AUDIT_RETENTION_DAYS", "CLOUDFLARE_ACCESS_OIDC_ISSUER", "CLOUDFLARE_ACCESS_OIDC_CLIENT_ID", "CLOUDFLARE_ACCESS_OIDC_LABEL", "CLOUDFLARE_ACCESS_TEAM_DOMAIN", "CLOUDFLARE_ACCESS_AUD", "CLOUDFLARE_ACCESS_APPS_AUD", "CLOUDFLARE_ACCESS_AUTO_JOIN_DOMAINS", "CLOUDFLARE_ACCESS_OUTER_RING_AUTO_JOIN", "HOSTED_OPEN_SIGNUP", "BROWSER_APP_INSTALLS", "DISPATCH_NAMESPACE", "THIRD_PARTY_DOMAIN", "EVENTS_ALLOW_PRIVATE_TARGETS"];
+/**
+ * The settings naming the instance an OAuth client is registered on
+ * (`hostSetting` in the catalog: Mastodon's `MASTODON_URL`), in catalog
+ * order: an origin, a plain value.
+ */
+export declare const OAUTH_CLIENT_HOST_SETTINGS: readonly string[];
 /** Whether a settable Gateway setting's value is a plain value, not a credential. */
 export declare function isPlainGatewaySetting(name: string): boolean;
 /**

package/dist/internal/gatewaySettings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gatewaySettings.d.ts","sourceRoot":"","sources":["../../src/internal/gatewaySettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAM3B;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,mLASjC,CAAC;AAMX,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElE;AAoBD,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,yrBAkCvB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAC9B,OAAO,CAAC,gBAAgB,EAAE,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,GAC1E,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1C;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,sBAAsB,EAItE,CAAC;AAIF;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,QAAgC,CAAC;AAEvE,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,omBAwBmB,CAAC;AASvD,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,6EAIa,CAAC;AAIvD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,iGAAiG;AACjG,eAAO,MAAM,yBAAyB,yDAI5B,CAAC;AAEX,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAmBD,iDAAiD;AACjD,eAAO,MAAM,8BAA8B,sFAC0C,CAAC;AAEtF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAM7D;AAED,4EAA4E;AAC5E,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAQ5E"}
+{"version":3,"file":"gatewaySettings.d.ts","sourceRoot":"","sources":["../../src/internal/gatewaySettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAM3B;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,mLASjC,CAAC;AAMX,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElE;AAoBD,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,yrBAkCvB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAC9B,OAAO,CAAC,gBAAgB,EAAE,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,GAC1E,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1C;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,sBAAsB,EAItE,CAAC;AAIF;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,QAAgC,CAAC;AAEvE,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,olBAuBmB,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAMpD,CAAC;AAUL,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,6EAIa,CAAC;AAIvD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,iGAAiG;AACjG,eAAO,MAAM,yBAAyB,yDAI5B,CAAC;AAEX,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAmBD,iDAAiD;AACjD,eAAO,MAAM,8BAA8B,sFAC0C,CAAC;AAEtF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAM7D;AAED,4EAA4E;AAC5E,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAQ5E"}

package/dist/internal/gatewaySettings.js

@@ -127,7 +127,6 @@ export const PLAIN_GATEWAY_SETTINGS = [
     "EMAIL_FROM_NAME",
     "EMAIL_PROVIDER",
     "EMAIL_PASSWORD_SIGN_IN",
-    "MASTODON_URL",
     "AI_PROXY_EXTRA_ROUTES",
     "MCP_OAUTH_ENABLED",
     "MCP_DCR_ENABLED",
@@ -147,8 +146,20 @@ export const PLAIN_GATEWAY_SETTINGS = [
     "THIRD_PARTY_DOMAIN",
     "EVENTS_ALLOW_PRIVATE_TARGETS",
 ];
+/**
+ * The settings naming the instance an OAuth client is registered on
+ * (`hostSetting` in the catalog: Mastodon's `MASTODON_URL`), in catalog
+ * order: an origin, a plain value.
+ */
+export const OAUTH_CLIENT_HOST_SETTINGS = CAPABILITY_IDS.flatMap((id) => {
+    const capability = CAPABILITIES[id];
+    return capability.mode === "oauth_client" && capability.hostSetting
+        ? [capability.hostSetting]
+        : [];
+});
 const PLAIN = new Set([
     ...PLAIN_GATEWAY_SETTINGS,
+    ...OAUTH_CLIENT_HOST_SETTINGS,
     // The sign-in providers' ids, issuer, label and tenant; their client
     // secrets are credentials.
     ...PLAIN_SIGN_IN_SETTINGS,

package/dist/manifest.d.ts

@@ -0,0 +1,205 @@
+/**
+ * The manifest an app author writes as `everyapp.config.ts`, typed:
+ *
+ *   import { defineEveryApp } from "@every-app/sdk";
+ *
+ *   export default defineEveryApp({
+ *     id: "notes",
+ *     name: "Notes",
+ *     resources: { d1: ["DB"] },
+ *   });
+ *
+ * Types only, and a leaf module: `cloudflare.config.ts` imports the manifest,
+ * and the Cloudflare Vite plugin hides from the Worker every file the config
+ * imports. The rules beyond the shape (which ids exist, which names are
+ * reserved, which scope sets a provider has) are the CLI's: `everyapp deploy`
+ * and `everyapp dev` validate the manifest and say what is wrong. The
+ * perimeter's schema (`@every-app/perimeter/manifest`) is held to this type
+ * by a test there.
+ *
+ * The Worker reads the manifest back as `env.EVERYAPP_MANIFEST`, which
+ * `everyAppWorker()` sets and `cf workers types` types from the file.
+ */
+/** Why a setting is needed and whether the app opens without it (the settings model). */
+export interface EveryAppSettingNeed {
+    /** Why the app needs it, for whoever sets it. At most 200 characters. */
+    readonly why?: string;
+    /** An https page that says where the key or client comes from. */
+    readonly docs?: string;
+    /** The app opens without it; the feature using it says what is missing. */
+    readonly optional?: boolean;
+    /** The group of which one member is enough ("AI model"). */
+    readonly anyOf?: string;
+}
+/** A route reachable without a signed-in member. */
+export interface EveryAppPublicRoute {
+    /** Absolute glob: `*` matches one segment, `**` one or more. */
+    readonly path: string;
+    /** The methods it answers; `["GET"]` when left out. */
+    readonly methods?: readonly string[];
+}
+/** A Durable Object or Workflow class: its binding, the class, and the helper Worker that defines it. */
+export interface EveryAppClassResource {
+    readonly name: string;
+    readonly className: string;
+    readonly worker?: string;
+}
+/** A Cloudflare Queue's consumer settings. */
+export interface EveryAppQueueConsumer {
+    readonly worker?: string;
+    readonly maxBatchSize?: number;
+    readonly maxBatchTimeout?: number;
+    readonly maxRetries?: number;
+    readonly maxConcurrency?: number | null;
+    readonly retryDelay?: number;
+    readonly visibilityTimeoutMs?: number;
+    readonly deadLetterQueue?: string;
+}
+/** Cloudflare's limits for one of the app's Workers. */
+export interface EveryAppWorkerLimits {
+    /** CPU milliseconds an invocation may use, up to 300000. */
+    readonly cpuMs?: number;
+}
+/** The Cloudflare resources the app's Workers bind; the deploy creates them. */
+export interface EveryAppResources {
+    readonly d1?: readonly string[];
+    readonly kv?: readonly string[];
+    readonly r2?: readonly string[];
+    readonly durableObjects?: readonly EveryAppClassResource[];
+    readonly workflows?: readonly EveryAppClassResource[];
+    readonly hyperdrive?: readonly {
+        readonly name: string;
+        readonly worker?: string;
+        readonly caching?: "off" | "default";
+    }[];
+    readonly queues?: readonly {
+        readonly name: string;
+        readonly consumer?: true | EveryAppQueueConsumer;
+    }[];
+    readonly ai?: readonly string[];
+    readonly browser?: readonly string[];
+    readonly images?: readonly string[];
+    readonly vectorize?: readonly {
+        readonly name: string;
+        readonly dimensions?: number;
+        readonly metric?: "cosine" | "euclidean" | "dot-product";
+        /** A Workers AI embedding model's shape, instead of `dimensions` and `metric`. */
+        readonly preset?: "@cf/baai/bge-small-en-v1.5" | "@cf/baai/bge-base-en-v1.5" | "@cf/baai/bge-large-en-v1.5" | "openai/text-embedding-ada-002" | "cohere/embed-multilingual-v2.0";
+    }[];
+    readonly aiGateway?: readonly {
+        readonly name: string;
+        readonly collectLogs?: boolean;
+        readonly cacheTtl?: number;
+    }[];
+    readonly sendEmail?: readonly {
+        readonly name: string;
+        readonly allowedSenderAddresses: readonly string[];
+        readonly destinationAddress?: string;
+        readonly allowedDestinationAddresses?: readonly string[];
+    }[];
+    readonly secretsStore?: readonly {
+        readonly name: string;
+    }[];
+    readonly analyticsEngine?: readonly {
+        readonly name: string;
+        readonly dataset?: string;
+    }[];
+}
+/** One capability the Gateway serves the app with keys it holds. */
+export interface EveryAppCapabilityEntry extends EveryAppSettingNeed {
+    readonly access: "read" | "write";
+    /** An OAuth client's scope sets, by name (`["gmail.read"]`). */
+    readonly scopes?: readonly string[];
+}
+/** One of the app's own secrets, with its need. */
+export interface EveryAppSecretEntry extends EveryAppSettingNeed {
+    readonly name: string;
+    /** Its guide in the everyapp skill (`"setup/main-secret.md"`). */
+    readonly setup?: string;
+}
+/** `everyapp.config.ts`. */
+export interface EveryAppManifest {
+    /** Stable id, kebab-case: the app's hostname and Worker. */
+    readonly id: string;
+    readonly name?: string;
+    /** The one line the Gateway's app library shows under the name. */
+    readonly description?: string;
+    /** The path of an SVG the app serves (`"/everyapp-icon.svg"`). */
+    readonly icon?: string;
+    /** Legacy: the entry comes from `cloudflare.config.ts`. */
+    readonly main?: string;
+    /** YYYY-MM-DD. */
+    readonly compatibilityDate?: string;
+    readonly resources?: EveryAppResources;
+    /** Helper Workers deployed beside the app's as `<app worker>--<name>`. */
+    readonly workers?: readonly {
+        readonly name: string;
+        readonly binding?: string;
+        readonly limits?: EveryAppWorkerLimits;
+    }[];
+    readonly database?: {
+        readonly provider: "d1" | "postgres";
+        /** A cloud region such as `"aws:us-east-1"`. */
+        readonly region?: string;
+    };
+    readonly limits?: EveryAppWorkerLimits;
+    /** Routes open without a signed-in member. Default: none. */
+    readonly public?: readonly EveryAppPublicRoute[];
+    /** AI providers the Gateway calls for the app, by id or with their need. */
+    readonly providers?: readonly (string | (EveryAppSettingNeed & {
+        readonly id: string;
+    }))[];
+    /** Capabilities by id (`members`, `email`, `dataforseo`, …). */
+    readonly capabilities?: {
+        readonly [id: string]: EveryAppCapabilityEntry;
+    };
+    /** The app's own secrets, by name or with their need. */
+    readonly secrets?: readonly (string | EveryAppSecretEntry)[];
+    /** App-domain scopes personal access tokens may request, with descriptions. */
+    readonly scopes?: {
+        readonly [scope: string]: string;
+    };
+    readonly ai?: {
+        /** Model ids the app may request; any other is `model_not_allowed`. */
+        readonly models?: readonly string[];
+        /** OpenAI API paths beyond inference (`"/v1/files"`). */
+        readonly routes?: readonly string[];
+        /** The app takes the Gateway's default chat model (`ai()`). */
+        readonly chat?: boolean | EveryAppSettingNeed;
+    };
+    /** `inbound: true`: the Worker exports an `email()` handler. */
+    readonly email?: {
+        readonly inbound?: boolean;
+    };
+    /** Who can open the app once registered; `"admins"` by default. */
+    readonly access?: "everyone" | "admins";
+    readonly serverFnGuard?: boolean;
+    readonly serverFnBase?: string;
+    /** Shell command that builds the app; `cf build` by default. */
+    readonly build?: string;
+    /** Shell command `everyapp dev` starts; it must listen on PORT. */
+    readonly dev?: string;
+    /** Legacy: the port comes from PORT. */
+    readonly devPort?: number;
+    /** Dependency install command; false skips it. */
+    readonly install?: false | string;
+    readonly migrations?: {
+        readonly engine: "drizzle" | "d1-sql" | "prisma";
+        readonly dialect?: "sqlite" | "postgresql";
+        readonly dir?: string;
+        readonly config?: string;
+        readonly binding?: string;
+    };
+    /** Who answers `/mcp` on the app's own host, and why it needs to. */
+    readonly mcp?: {
+        readonly by: "gateway" | "app";
+        readonly why: string;
+    };
+}
+/**
+ * Type `everyapp.config.ts` without widening it: the literal binding names
+ * stay, so `everyAppWorker()` types `env.DB` and `env.EVERYAPP_MANIFEST`
+ * from them. Returns the manifest as given.
+ */
+export declare function defineEveryApp<const M extends EveryAppManifest>(manifest: M): M;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,yEAAyE;IACzE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IAClC,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,yGAAyG;AACzG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,8CAA8C;AAC9C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,wDAAwD;AACxD,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;KACtC,EAAE,CAAC;IACJ,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,qBAAqB,CAAC;KAClD,EAAE,CAAC;IACJ,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,aAAa,CAAC;QACzD,kFAAkF;QAClF,QAAQ,CAAC,MAAM,CAAC,EACZ,4BAA4B,GAC5B,2BAA2B,GAC3B,4BAA4B,GAC5B,+BAA+B,GAC/B,gCAAgC,CAAC;KACtC,EAAE,CAAC;IACJ,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;QAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,EAAE,CAAC;IACJ,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;QACnD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KAC1D,EAAE,CAAC;IACJ,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7D,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS;QAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,EAAE,CAAC;CACL;AAED,oEAAoE;AACpE,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,gEAAgE;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,mDAAmD;AACnD,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,4BAA4B;AAC5B,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB;IAClB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;KACxC,EAAE,CAAC;IACJ,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,IAAI,GAAG,UAAU,CAAC;QACrC,gDAAgD;QAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAC1B,MAAM,GACN,CAAC,mBAAmB,GAAG;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAClD,EAAE,CAAC;IACJ,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,GAAG,uBAAuB,CAAA;KAAE,CAAC;IAC3E,yDAAyD;IACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,mBAAmB,CAAC,EAAE,CAAC;IAC7D,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACvD,QAAQ,CAAC,EAAE,CAAC,EAAE;QACZ,uEAAuE;QACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,yDAAyD;QACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,+DAA+D;QAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,mBAAmB,CAAC;KAC/C,CAAC;IACF,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAChD,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,kDAAkD;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;QAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,qEAAqE;IACrE,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,GAAG,KAAK,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACzE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,CAAC,CAAC,SAAS,gBAAgB,EAC7D,QAAQ,EAAE,CAAC,GACV,CAAC,CAEH"}

package/dist/manifest.js

@@ -0,0 +1,30 @@
+/**
+ * The manifest an app author writes as `everyapp.config.ts`, typed:
+ *
+ *   import { defineEveryApp } from "@every-app/sdk";
+ *
+ *   export default defineEveryApp({
+ *     id: "notes",
+ *     name: "Notes",
+ *     resources: { d1: ["DB"] },
+ *   });
+ *
+ * Types only, and a leaf module: `cloudflare.config.ts` imports the manifest,
+ * and the Cloudflare Vite plugin hides from the Worker every file the config
+ * imports. The rules beyond the shape (which ids exist, which names are
+ * reserved, which scope sets a provider has) are the CLI's: `everyapp deploy`
+ * and `everyapp dev` validate the manifest and say what is wrong. The
+ * perimeter's schema (`@every-app/perimeter/manifest`) is held to this type
+ * by a test there.
+ *
+ * The Worker reads the manifest back as `env.EVERYAPP_MANIFEST`, which
+ * `everyAppWorker()` sets and `cf workers types` types from the file.
+ */
+/**
+ * Type `everyapp.config.ts` without widening it: the literal binding names
+ * stay, so `everyAppWorker()` types `env.DB` and `env.EVERYAPP_MANIFEST`
+ * from them. Returns the manifest as given.
+ */
+export function defineEveryApp(manifest) {
+    return manifest;
+}

package/dist/server/ai.d.ts

@@ -41,5 +41,26 @@ export declare const AI_DEFAULT_BASE_URL = "http://every-app-gateway.internal/ap
  * `createGatewayFetch` does (no binding and no dev key) and
  * `AttributionError` where a shared app's call says nobody's.
  */
+export declare function ai(options: CreateGatewayFetchOptions & {
+    optional: true;
+}): AiClient | null;
 export declare function ai(options: CreateGatewayFetchOptions): AiClient;
+/**
+ * A provider's root behind the Gateway, `http://every-app-gateway.internal/api/ai/<provider>`:
+ * join the provider's own paths onto it (`/api/v1/chat/completions` for
+ * OpenRouter) and send them with `createGatewayFetch()`. For an OpenAI
+ * client's `baseURL`, use {@link aiBaseUrl}.
+ */
+export declare function providerBaseUrl(provider: string): string;
+/**
+ * The OpenAI-compatible base URL of `provider` behind the Gateway, for an
+ * OpenAI client's `baseURL` (with `fetch: createGatewayFetch(...)`):
+ * `default` (the default) is {@link AI_DEFAULT_BASE_URL},
+ * `…/api/ai/default/v1`; a catalog provider's is its root and the prefix
+ * of its chat route (`…/api/ai/openrouter/api/v1`, `…/api/ai/workers-ai/v1`,
+ * `…/api/ai/openai/v1`). Throws `ConfigurationError` for a provider with
+ * no OpenAI-compatible chat route (Cohere): call {@link providerBaseUrl}
+ * with its own paths instead.
+ */
+export declare function aiBaseUrl(provider?: string): string;
 //# sourceMappingURL=ai.d.ts.map

package/dist/server/ai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/server/ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,gBAAgB,EAAuB,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAGL,KAAK,yBAAyB,EAC/B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,QAAQ;IACvB,0FAA0F;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,gFAAgF;IAChF,KAAK,EAAE,OAAO,gBAAgB,CAAC;IAC/B,qEAAqE;IACrE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,wDAAuD,CAAC;AAExF;;;;;GAKG;AACH,wBAAgB,EAAE,CAAC,OAAO,EAAE,yBAAyB,GAAG,QAAQ,CAQ/D"}
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/server/ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACL,gBAAgB,EAIjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,yBAAyB,EAC/B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,QAAQ;IACvB,0FAA0F;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,gFAAgF;IAChF,KAAK,EAAE,OAAO,gBAAgB,CAAC;IAC/B,qEAAqE;IACrE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,wDAAuD,CAAC;AAExF;;;;;GAKG;AACH,wBAAgB,EAAE,CAChB,OAAO,EAAE,yBAAyB,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GACtD,QAAQ,GAAG,IAAI,CAAC;AACnB,wBAAgB,EAAE,CAAC,OAAO,EAAE,yBAAyB,GAAG,QAAQ,CAAC;AAejE;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,QAAQ,GAAE,MAA4B,GAAG,MAAM,CAaxE"}

package/dist/server/ai.js

@@ -19,22 +19,51 @@
  * fallback). An app that needs one provider in particular keeps listing it
  * under `providers` and calling `/api/ai/<provider>/…`.
  */
-import { AI_DEFAULT_MODEL, AI_DEFAULT_PROVIDER } from "../internal/index.js";
+import { AI_DEFAULT_MODEL, AI_DEFAULT_PROVIDER, CATALOG, ConfigurationError, } from "../internal/index.js";
 import { BINDING_ORIGIN, createGatewayFetch, } from "./gatewayFetch.js";
 /** The base URL of the default route, as the SDK and the docs name it. */
 export const AI_DEFAULT_BASE_URL = `${BINDING_ORIGIN}/api/ai/${AI_DEFAULT_PROVIDER}/v1`;
-/**
- * The Gateway's default chat model as a client: a base URL, a fetch and
- * the model name to send. Throws `ConfigurationError` where
- * `createGatewayFetch` does (no binding and no dev key) and
- * `AttributionError` where a shared app's call says nobody's.
- */
 export function ai(options) {
+    const fetch = createGatewayFetch(options);
+    if (!fetch)
+        return null;
     return {
         baseURL: AI_DEFAULT_BASE_URL,
-        fetch: createGatewayFetch(options),
+        fetch,
         model: AI_DEFAULT_MODEL,
         chatCompletionsUrl: `${AI_DEFAULT_BASE_URL}/chat/completions`,
         embeddingsUrl: `${AI_DEFAULT_BASE_URL}/embeddings`,
     };
 }
+const CHAT_COMPLETIONS = "/chat/completions";
+/**
+ * A provider's root behind the Gateway, `http://every-app-gateway.internal/api/ai/<provider>`:
+ * join the provider's own paths onto it (`/api/v1/chat/completions` for
+ * OpenRouter) and send them with `createGatewayFetch()`. For an OpenAI
+ * client's `baseURL`, use {@link aiBaseUrl}.
+ */
+export function providerBaseUrl(provider) {
+    return `${BINDING_ORIGIN}/api/ai/${encodeURIComponent(provider)}`;
+}
+/**
+ * The OpenAI-compatible base URL of `provider` behind the Gateway, for an
+ * OpenAI client's `baseURL` (with `fetch: createGatewayFetch(...)`):
+ * `default` (the default) is {@link AI_DEFAULT_BASE_URL},
+ * `…/api/ai/default/v1`; a catalog provider's is its root and the prefix
+ * of its chat route (`…/api/ai/openrouter/api/v1`, `…/api/ai/workers-ai/v1`,
+ * `…/api/ai/openai/v1`). Throws `ConfigurationError` for a provider with
+ * no OpenAI-compatible chat route (Cohere): call {@link providerBaseUrl}
+ * with its own paths instead.
+ */
+export function aiBaseUrl(provider = AI_DEFAULT_PROVIDER) {
+    if (provider === AI_DEFAULT_PROVIDER)
+        return AI_DEFAULT_BASE_URL;
+    const capability = CATALOG.get(provider);
+    const chat = capability?.mode === "ai" && "chat" in capability
+        ? capability.chat
+        : undefined;
+    if (!chat?.path.endsWith(CHAT_COMPLETIONS)) {
+        throw new ConfigurationError(`${provider} has no OpenAI-compatible chat route in the catalog: join its own paths onto providerBaseUrl("${provider}") instead.`);
+    }
+    return `${providerBaseUrl(provider)}${chat.path.slice(0, -CHAT_COMPLETIONS.length)}`;
+}