@every-app/sdk 0.3.0-rc.4 → 0.3.0-rc.6

package/dist/internal/providerSpec.js

@@ -6,11 +6,15 @@
  * JSON into an {@link ApiKeyCapability} or names every problem; nothing
  * here reads a value: a spec names Gateway settings, never holds one.
  *
- * Two kinds parse: API-key providers (`auth.kind` bearer, header, query
- * or basic) and OAuth providers (`auth.kind` oauth2-user, the half in
+ * Three kinds parse: API-key providers (`auth.kind` bearer, header, query
+ * or basic), OAuth providers (`auth.kind` oauth2-user, the half in
  * ./oauthSpec.ts: the Gateway runs the flow and holds the tokens,
- * docs/design/2026-10-oauth-providers.md). An AI provider is a catalog
- * entry only; the parser says so rather than guessing.
+ * docs/design/2026-10-oauth-providers.md), and OpenAI-compatible model
+ * providers (`mode: "ai"`: a `baseUrl`, the key's placement, the models
+ * it serves and the default, its inference routes; the AI proxy serves a
+ * row exactly as it serves a catalog `ai` entry, inference POSTs alone,
+ * `store: false` on chat, the usage tap, so a new model vendor is a
+ * registered spec, not a catalog release).
  *
  * The rules that make a row safe on a particular gateway (its secret names
  * are its own, its hosts are public, it shadows no catalog entry) are the
@@ -60,6 +64,15 @@ const RESERVED_HEADERS = new Set([
 ]);
 const MAX_HOSTS = 20;
 const MAX_ACCOUNT_WIDE_PATHS = 50;
+/** An inference route an `ai` row names: `/v1/chat/completions`, segments of lowercase letters, digits, `_` and `-`. */
+const AI_ROUTE = /^(?:\/[a-z0-9_-]+)+$/;
+const MAX_AI_ROUTES = 20;
+const MAX_MODELS = 100;
+/** A model name as OpenAI-compatible APIs spell them: `gpt-6-luna`, `meta-llama/llama-4`, `claude-haiku-5-5:beta`. */
+const MODEL_NAME = /^[A-Za-z0-9][A-Za-z0-9._:/@-]{0,199}$/;
+/** What an `ai` row serves by default: chat, and embeddings when it names an embeddings model. */
+export const AI_SPEC_CHAT_ROUTE = "/v1/chat/completions";
+export const AI_SPEC_EMBEDDINGS_ROUTE = "/v1/embeddings";
 const KNOWN_FIELDS = new Set([
     "id",
     "mode",
@@ -87,7 +100,39 @@ const KNOWN_FIELDS = new Set([
     "scopeSets",
     "alwaysRequested",
     "tolerated",
+    // An `ai` spec's own.
+    "baseUrl",
+    "models",
+    "defaultModel",
+    "embeddingsModel",
+    "routes",
+    "chatRoute",
+    "embeddingsRoute",
 ]);
+/** Fields only an `ai` spec has. */
+const AI_ONLY_FIELDS = [
+    "baseUrl",
+    "models",
+    "defaultModel",
+    "embeddingsModel",
+    "routes",
+    "chatRoute",
+    "embeddingsRoute",
+];
+/** Fields an `ai` spec never has: the key goes to one base URL, and the AI proxy's rules replace the capability proxy's. */
+const NOT_AI_FIELDS = [
+    "hosts",
+    "hostSetting",
+    "data",
+    "access",
+    "readMethods",
+    "writeMethods",
+    "accountWidePaths",
+    ...OAUTH_ONLY_FIELDS_LIST(),
+];
+function OAUTH_ONLY_FIELDS_LIST() {
+    return ["scopeSets", "alwaysRequested", "tolerated"];
+}
 /** Fields an API-key spec has that an `oauth2-user` spec does not. */
 const API_KEY_ONLY_FIELDS = [
     "hostSetting",
@@ -624,13 +669,20 @@ export function parseProviderSpec(input) {
         });
     }
     const isOAuth = isRecord(input["auth"]) && input["auth"]["kind"] === "oauth2-user";
+    const isAi = input["mode"] === "ai";
     const expectedMode = isOAuth ? "oauth_client" : "api_key";
-    if (input["mode"] !== undefined && input["mode"] !== expectedMode) {
+    if (!isAi && input["mode"] !== undefined && input["mode"] !== expectedMode) {
         problems.push({
             path: "mode",
             message: isOAuth
                 ? "an oauth2-user spec's mode is oauth_client (or left out)"
-                : "this gateway registers api_key and oauth_client (auth.kind oauth2-user) providers; an AI provider is a catalog entry",
+                : 'this gateway registers api_key, oauth_client (auth.kind oauth2-user) and ai (mode: "ai", an OpenAI-compatible model provider) providers',
+        });
+    }
+    if (isAi && isOAuth) {
+        problems.push({
+            path: "auth.kind",
+            message: "an ai spec's key is a bearer, header, query or basic key, never oauth2-user",
         });
     }
     const name = text(input["name"], "name", problems, { max: 64 });
@@ -659,6 +711,9 @@ export function parseProviderSpec(input) {
             }
         },
     });
+    if (isAi && !isOAuth) {
+        return parseAiSpec(input, problems, { id, name, description, docs, api });
+    }
     if (isOAuth) {
         const { access, readMethods, writeMethods } = grants(input, problems);
         const hint = text(input["hint"], "hint", problems, { max: 500 });
@@ -789,6 +844,197 @@ export function parseProviderSpec(input) {
     };
     return { ok: true, id, capability };
 }
+/**
+ * The `ai` half of `parseProviderSpec`: an OpenAI-compatible model
+ * provider. `baseUrl` is where the app's path is joined (`https://api.groq.com/openai`:
+ * the origin, and a base path the proxy keeps in front of every route);
+ * `auth` places the key as an API-key spec does; `models` lists what the
+ * provider serves (1 to 100; the proxy refuses any other) with
+ * `defaultModel` the one the Gateway's default route fills in and
+ * `embeddingsModel` the one for `/api/ai/default/v1/embeddings`; `routes`
+ * are the inference paths apps may POST to (default chat, and embeddings
+ * with an embeddings model), `chatRoute` and `embeddingsRoute` which of
+ * them the default route maps onto. Chat answers are never stored
+ * (`store: false` on the chat route). `cost.responseField` is where the
+ * answer carries the call's price, read by the usage tap as OpenRouter's
+ * `usage.cost` is.
+ */
+function parseAiSpec(input, problems, common) {
+    for (const field of NOT_AI_FIELDS) {
+        if (input[field] !== undefined) {
+            problems.push({ path: field, message: "not a field of an ai spec" });
+        }
+    }
+    const base = httpsUrl(input["baseUrl"], "baseUrl", problems);
+    let origin;
+    let basePath;
+    if (input["baseUrl"] === undefined) {
+        problems.push({
+            path: "baseUrl",
+            message: "required: the https URL the app's paths are joined onto (https://api.groq.com/openai)",
+        });
+    }
+    else if (base !== undefined) {
+        const url = new URL(base);
+        if (url.search || url.hash || url.username || url.password || url.port) {
+            problems.push({
+                path: "baseUrl",
+                message: "must be an https URL with no query, fragment, credentials or port",
+            });
+        }
+        else if (!PROVIDER_HOST.test(url.hostname)) {
+            problems.push({
+                path: "baseUrl",
+                message: "must name a public host with a dot (api.groq.com)",
+            });
+        }
+        else {
+            origin = url.origin;
+            const path = url.pathname.replace(/\/+$/, "");
+            if (path && !AI_ROUTE.test(path)) {
+                problems.push({
+                    path: "baseUrl",
+                    message: "its path must be segments of lowercase letters, digits, _ and -",
+                });
+            }
+            else if (path) {
+                basePath = path;
+            }
+        }
+    }
+    const parsedAuth = auth(input["auth"], problems);
+    if (input["auth"] === undefined) {
+        problems.push({ path: "auth", message: "required" });
+    }
+    const secrets = secretDetails(input["secrets"], parsedAuth ? authSettingNames(parsedAuth) : [], problems);
+    const models = stringList(input["models"], "models", problems, {
+        max: MAX_MODELS,
+        each: (model, at) => {
+            if (!MODEL_NAME.test(model)) {
+                problems.push({
+                    path: at,
+                    message: "must be a model name (gpt-6-luna, meta-llama/llama-4)",
+                });
+            }
+        },
+    });
+    if (input["models"] === undefined || (models && models.length === 0)) {
+        problems.push({
+            path: "models",
+            message: "required: the models the provider serves, at least one",
+        });
+    }
+    const defaultModel = text(input["defaultModel"], "defaultModel", problems, {
+        max: 200,
+    });
+    if (input["defaultModel"] === undefined) {
+        problems.push({
+            path: "defaultModel",
+            message: "required: the chat model the Gateway fills in when an app names none; one of models",
+        });
+    }
+    else if (defaultModel !== undefined &&
+        models &&
+        !models.includes(defaultModel)) {
+        problems.push({ path: "defaultModel", message: "must be one of models" });
+    }
+    const embeddingsModel = text(input["embeddingsModel"], "embeddingsModel", problems, { max: 200 });
+    if (embeddingsModel !== undefined &&
+        models &&
+        !models.includes(embeddingsModel)) {
+        problems.push({
+            path: "embeddingsModel",
+            message: "must be one of models",
+        });
+    }
+    const routeList = (value, path) => stringList(value, path, problems, {
+        max: MAX_AI_ROUTES,
+        each: (route, at) => {
+            if (!AI_ROUTE.test(route)) {
+                problems.push({
+                    path: at,
+                    message: "must be a path of lowercase segments starting with / (/v1/chat/completions)",
+                });
+            }
+        },
+    });
+    const chatRoute = text(input["chatRoute"], "chatRoute", problems, { max: 200 }) ??
+        AI_SPEC_CHAT_ROUTE;
+    const embeddingsRoute = text(input["embeddingsRoute"], "embeddingsRoute", problems, { max: 200 }) ??
+        AI_SPEC_EMBEDDINGS_ROUTE;
+    for (const [field, route] of [
+        ["chatRoute", chatRoute],
+        ["embeddingsRoute", embeddingsRoute],
+    ]) {
+        if (!AI_ROUTE.test(route)) {
+            problems.push({
+                path: field,
+                message: "must be a path of lowercase segments starting with /",
+            });
+        }
+    }
+    const routes = routeList(input["routes"], "routes") ?? [
+        chatRoute,
+        ...(embeddingsModel !== undefined ? [embeddingsRoute] : []),
+    ];
+    if (routes.length === 0) {
+        problems.push({ path: "routes", message: "must list a route" });
+    }
+    if (!routes.includes(chatRoute)) {
+        problems.push({ path: "chatRoute", message: "must be one of routes" });
+    }
+    if (embeddingsModel !== undefined && !routes.includes(embeddingsRoute)) {
+        problems.push({
+            path: "embeddingsRoute",
+            message: "must be one of routes",
+        });
+    }
+    const hint = text(input["hint"], "hint", problems, { max: 500 });
+    const smokeRequest = smoke(input["smoke"], origin ? [new URL(origin).host] : [], problems);
+    const parsedCost = cost(input["cost"], problems);
+    const parsedRate = rate(input["rate"], problems);
+    const example = text(input["example"], "example", problems, { max: 200 });
+    const parsedVerified = verified(input["verified"], problems);
+    const tags = tagList(input["tags"], problems);
+    const { id, name, description, docs, api } = common;
+    if (problems.length > 0 ||
+        typeof id !== "string" ||
+        name === undefined ||
+        docs === undefined ||
+        origin === undefined ||
+        !parsedAuth ||
+        !models ||
+        defaultModel === undefined) {
+        return { ok: false, problems };
+    }
+    const capability = {
+        mode: "ai",
+        label: name,
+        auth: parsedAuth,
+        docs,
+        origin,
+        ...(basePath === undefined ? {} : { basePath }),
+        inferenceRoutes: routes,
+        unstoredRoutes: [chatRoute],
+        shape: "openai",
+        chat: { path: chatRoute, seedModel: defaultModel },
+        ...(embeddingsModel === undefined
+            ? {}
+            : { embeddings: { path: embeddingsRoute, seedModel: embeddingsModel } }),
+        models,
+        ...(description === undefined ? {} : { description }),
+        ...(api === undefined ? {} : { api }),
+        ...(secrets === undefined ? {} : { secrets }),
+        ...(hint === undefined ? {} : { hint }),
+        ...(smokeRequest === undefined ? {} : { smoke: smokeRequest }),
+        ...(parsedCost === undefined ? {} : { cost: parsedCost }),
+        ...(parsedRate === undefined ? {} : { rate: parsedRate }),
+        ...(example === undefined ? {} : { example }),
+        ...(parsedVerified === undefined ? {} : { verified: parsedVerified }),
+        ...(tags === undefined ? {} : { tags }),
+    };
+    return { ok: true, id, capability };
+}
 /** The problems as one line: `auth.secret: must name a Gateway setting; hosts.0: …`. */
 export function describeSpecProblems(problems) {
     return problems
@@ -809,6 +1055,58 @@ export function providerSpecOf(id, capability) {
         }
         return spec;
     }
+    if (capability.mode === "ai") {
+        if (!capability.chat || !capability.models) {
+            throw new Error(`${id} is a catalog AI entry without a model list: it has no spec`);
+        }
+        return {
+            id,
+            mode: "ai",
+            name: capability.label,
+            ...(capability.description === undefined
+                ? {}
+                : { description: capability.description }),
+            docs: capability.docs,
+            ...(capability.api === undefined ? {} : { api: capability.api }),
+            baseUrl: `${capability.origin}${capability.basePath ?? ""}`,
+            auth: { ...capability.auth },
+            ...(capability.secrets === undefined
+                ? {}
+                : { secrets: capability.secrets.map((detail) => ({ ...detail })) }),
+            models: [...capability.models],
+            defaultModel: capability.chat.seedModel,
+            ...(capability.embeddings === undefined
+                ? {}
+                : { embeddingsModel: capability.embeddings.seedModel }),
+            routes: [...capability.inferenceRoutes],
+            chatRoute: capability.chat.path,
+            ...(capability.embeddings === undefined
+                ? {}
+                : { embeddingsRoute: capability.embeddings.path }),
+            ...(capability.hint === undefined ? {} : { hint: capability.hint }),
+            ...(capability.smoke === undefined
+                ? {}
+                : {
+                    smoke: {
+                        ...capability.smoke,
+                        expect: [...capability.smoke.expect],
+                    },
+                }),
+            ...(capability.cost === undefined
+                ? {}
+                : { cost: { ...capability.cost } }),
+            ...(capability.rate === undefined
+                ? {}
+                : { rate: { ...capability.rate } }),
+            ...(capability.example === undefined
+                ? {}
+                : { example: capability.example }),
+            ...(capability.verified === undefined
+                ? {}
+                : { verified: capability.verified }),
+            ...(capability.tags === undefined ? {} : { tags: [...capability.tags] }),
+        };
+    }
     return {
         id,
         name: capability.label,
@@ -851,5 +1149,6 @@ export function providerSpecOf(id, capability) {
 }
 /** The methods an app with `access: "write"` may use on `capability` besides its read methods. */
 export function writeMethodsOf(capability) {
-    return capability.writeMethods ?? DEFAULT_WRITE_METHODS;
+    return ((capability.mode === "ai" ? undefined : capability.writeMethods) ??
+        DEFAULT_WRITE_METHODS);
 }

package/dist/manifest.d.ts

@@ -0,0 +1,226 @@
+/**
+ * The manifest an app author writes as `everyapp.config.ts`, typed:
+ *
+ *   import { defineEveryApp } from "@every-app/sdk";
+ *
+ *   export default defineEveryApp({
+ *     id: "notes",
+ *     name: "Notes",
+ *     resources: { d1: ["DB"] },
+ *   });
+ *
+ * Types only, and a leaf module: `cloudflare.config.ts` imports the manifest,
+ * and the Cloudflare Vite plugin hides from the Worker every file the config
+ * imports. The rules beyond the shape (which ids exist, which names are
+ * reserved, which scope sets a provider has) are the CLI's: `everyapp deploy`
+ * and `everyapp dev` validate the manifest and say what is wrong. The
+ * perimeter's schema (`@every-app/perimeter/manifest`) is held to this type
+ * by a test there.
+ *
+ * The Worker reads the manifest back as `env.EVERYAPP_MANIFEST`, which
+ * `everyAppWorker()` sets and `cf workers types` types from the file.
+ */
+/** Why a setting is needed and whether the app opens without it (the settings model). */
+export interface EveryAppSettingNeed {
+    /** Why the app needs it, for whoever sets it. At most 200 characters. */
+    readonly why?: string;
+    /** An https page that says where the key or client comes from. */
+    readonly docs?: string;
+    /** The app opens without it; the feature using it says what is missing. */
+    readonly optional?: boolean;
+    /** The group of which one member is enough ("AI model"). */
+    readonly anyOf?: string;
+}
+/** A route reachable without a signed-in member. */
+export interface EveryAppPublicRoute {
+    /** Absolute glob: `*` matches one segment, `**` one or more. */
+    readonly path: string;
+    /** The methods it answers; `["GET"]` when left out. */
+    readonly methods?: readonly string[];
+}
+/** A Durable Object or Workflow class: its binding, the class, and the helper Worker that defines it. */
+export interface EveryAppClassResource {
+    readonly name: string;
+    readonly className: string;
+    readonly worker?: string;
+}
+/** A Cloudflare Queue's consumer settings. */
+export interface EveryAppQueueConsumer {
+    readonly worker?: string;
+    readonly maxBatchSize?: number;
+    readonly maxBatchTimeout?: number;
+    readonly maxRetries?: number;
+    readonly maxConcurrency?: number | null;
+    readonly retryDelay?: number;
+    readonly visibilityTimeoutMs?: number;
+    readonly deadLetterQueue?: string;
+}
+/** Cloudflare's limits for one of the app's Workers. */
+export interface EveryAppWorkerLimits {
+    /** CPU milliseconds an invocation may use, up to 300000. */
+    readonly cpuMs?: number;
+}
+/** The Cloudflare resources the app's Workers bind; the deploy creates them. */
+export interface EveryAppResources {
+    readonly d1?: readonly string[];
+    readonly kv?: readonly string[];
+    readonly r2?: readonly string[];
+    readonly durableObjects?: readonly EveryAppClassResource[];
+    readonly workflows?: readonly EveryAppClassResource[];
+    readonly hyperdrive?: readonly {
+        readonly name: string;
+        readonly worker?: string;
+        readonly caching?: "off" | "default";
+    }[];
+    readonly queues?: readonly {
+        readonly name: string;
+        readonly consumer?: true | EveryAppQueueConsumer;
+    }[];
+    readonly ai?: readonly string[];
+    readonly browser?: readonly string[];
+    readonly images?: readonly string[];
+    readonly vectorize?: readonly {
+        readonly name: string;
+        readonly dimensions?: number;
+        readonly metric?: "cosine" | "euclidean" | "dot-product";
+        /** A Workers AI embedding model's shape, instead of `dimensions` and `metric`. */
+        readonly preset?: "@cf/baai/bge-small-en-v1.5" | "@cf/baai/bge-base-en-v1.5" | "@cf/baai/bge-large-en-v1.5" | "openai/text-embedding-ada-002" | "cohere/embed-multilingual-v2.0";
+    }[];
+    readonly aiGateway?: readonly {
+        readonly name: string;
+        readonly collectLogs?: boolean;
+        readonly cacheTtl?: number;
+    }[];
+    readonly sendEmail?: readonly {
+        readonly name: string;
+        readonly allowedSenderAddresses: readonly string[];
+        readonly destinationAddress?: string;
+        readonly allowedDestinationAddresses?: readonly string[];
+    }[];
+    readonly secretsStore?: readonly {
+        readonly name: string;
+    }[];
+    readonly analyticsEngine?: readonly {
+        readonly name: string;
+        readonly dataset?: string;
+    }[];
+}
+/** One capability the Gateway serves the app with keys it holds. */
+export interface EveryAppCapabilityEntry extends EveryAppSettingNeed {
+    readonly access: "read" | "write";
+    /** An OAuth client's scope sets, by name (`["gmail.read"]`). */
+    readonly scopes?: readonly string[];
+}
+/**
+ * One of the app's plain settings: a value that isn't a secret and
+ * differs per install (a PostHog host, a region), set with `everyapp
+ * configure <app>` and read from `env`.
+ */
+export interface EveryAppSettingEntry {
+    readonly name: string;
+    /** Why the app needs it: what whoever installs the app reads. */
+    readonly why: string;
+    readonly docs?: string;
+    readonly optional?: boolean;
+    /** What it takes; text when not given. */
+    readonly type?: "text" | "url" | "number" | "boolean";
+    /** The values a text setting may take. */
+    readonly values?: readonly string[];
+    /** What the app reads while nobody has set it; the deploy writes it. */
+    readonly default?: string;
+}
+/** One of the app's own secrets, with its need. */
+export interface EveryAppSecretEntry extends EveryAppSettingNeed {
+    readonly name: string;
+    /** Its guide in the everyapp skill (`"setup/main-secret.md"`). */
+    readonly setup?: string;
+}
+/** `everyapp.config.ts`. */
+export interface EveryAppManifest {
+    /** Stable id, kebab-case: the app's hostname and Worker. */
+    readonly id: string;
+    readonly name?: string;
+    /** The one line the Gateway's app library shows under the name. */
+    readonly description?: string;
+    /** The path of an SVG the app serves (`"/everyapp-icon.svg"`). */
+    readonly icon?: string;
+    /** Legacy: the entry comes from `cloudflare.config.ts`. */
+    readonly main?: string;
+    /** YYYY-MM-DD. */
+    readonly compatibilityDate?: string;
+    readonly resources?: EveryAppResources;
+    /** Helper Workers deployed beside the app's as `<app worker>--<name>`. */
+    readonly workers?: readonly {
+        readonly name: string;
+        readonly binding?: string;
+        readonly limits?: EveryAppWorkerLimits;
+    }[];
+    readonly database?: {
+        readonly provider: "d1" | "postgres";
+        /** A cloud region such as `"aws:us-east-1"`. */
+        readonly region?: string;
+    };
+    readonly limits?: EveryAppWorkerLimits;
+    /** Routes open without a signed-in member. Default: none. */
+    readonly public?: readonly EveryAppPublicRoute[];
+    /**
+     * Static files of the asset bundle anyone may fetch (favicons, icons, an
+     * OG image): path patterns, GET and HEAD, never Worker code.
+     */
+    readonly publicAssets?: readonly string[];
+    /** AI providers the Gateway calls for the app, by id or with their need. */
+    readonly providers?: readonly (string | (EveryAppSettingNeed & {
+        readonly id: string;
+    }))[];
+    /** Capabilities by id (`members`, `email`, `dataforseo`, …). */
+    readonly capabilities?: {
+        readonly [id: string]: EveryAppCapabilityEntry;
+    };
+    /** The app's own secrets, by name or with their need. */
+    readonly secrets?: readonly (string | EveryAppSecretEntry)[];
+    /** The app's plain settings: per-install values that aren't secrets. */
+    readonly settings?: readonly EveryAppSettingEntry[];
+    readonly ai?: {
+        /** Model ids the app may request; any other is `model_not_allowed`. */
+        readonly models?: readonly string[];
+        /** OpenAI API paths beyond inference (`"/v1/files"`). */
+        readonly routes?: readonly string[];
+        /** The app takes the Gateway's default chat model (`ai()`). */
+        readonly chat?: boolean | EveryAppSettingNeed;
+    };
+    /** `inbound: true`: the Worker exports an `email()` handler. */
+    readonly email?: {
+        readonly inbound?: boolean;
+    };
+    /** Who can open the app once registered; `"admins"` by default. */
+    readonly access?: "everyone" | "admins";
+    readonly serverFnGuard?: boolean;
+    readonly serverFnBase?: string;
+    /** Shell command that builds the app; `cf build` by default. */
+    readonly build?: string;
+    /** Shell command `everyapp dev` starts; it must listen on PORT. */
+    readonly dev?: string;
+    /** Legacy: the port comes from PORT. */
+    readonly devPort?: number;
+    /** Dependency install command; false skips it. */
+    readonly install?: false | string;
+    readonly migrations?: {
+        readonly engine: "drizzle" | "d1-sql" | "prisma";
+        readonly dialect?: "sqlite" | "postgresql";
+        readonly dir?: string;
+        readonly config?: string;
+        readonly binding?: string;
+    };
+    /** Who answers `/mcp` on the app's own host, and why it needs to. */
+    readonly mcp?: {
+        readonly by: "gateway" | "app";
+        readonly why: string;
+    };
+}
+/**
+ * Type `everyapp.config.ts` without widening it: the literal binding names
+ * stay, so `everyAppWorker()` types `env.DB` and `env.EVERYAPP_MANIFEST`
+ * from them. Returns the manifest as given.
+ */
+export declare function defineEveryApp<const M extends EveryAppManifest>(manifest: M): M;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,yEAAyE;IACzE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IAClC,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,yGAAyG;AACzG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,8CAA8C;AAC9C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,wDAAwD;AACxD,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;KACtC,EAAE,CAAC;IACJ,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,qBAAqB,CAAC;KAClD,EAAE,CAAC;IACJ,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,aAAa,CAAC;QACzD,kFAAkF;QAClF,QAAQ,CAAC,MAAM,CAAC,EACZ,4BAA4B,GAC5B,2BAA2B,GAC3B,4BAA4B,GAC5B,+BAA+B,GAC/B,gCAAgC,CAAC;KACtC,EAAE,CAAC;IACJ,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;QAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,EAAE,CAAC;IACJ,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;QACnD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KAC1D,EAAE,CAAC;IACJ,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7D,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS;QAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,EAAE,CAAC;CACL;AAED,oEAAoE;AACpE,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,gEAAgE;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;IACtD,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,mDAAmD;AACnD,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,4BAA4B;AAC5B,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB;IAClB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;KACxC,EAAE,CAAC;IACJ,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,IAAI,GAAG,UAAU,CAAC;QACrC,gDAAgD;QAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAC1B,MAAM,GACN,CAAC,mBAAmB,GAAG;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAClD,EAAE,CAAC;IACJ,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,GAAG,uBAAuB,CAAA;KAAE,CAAC;IAC3E,yDAAyD;IACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,mBAAmB,CAAC,EAAE,CAAC;IAC7D,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACpD,QAAQ,CAAC,EAAE,CAAC,EAAE;QACZ,uEAAuE;QACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,yDAAyD;QACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,+DAA+D;QAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,mBAAmB,CAAC;KAC/C,CAAC;IACF,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAChD,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,kDAAkD;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;QAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,qEAAqE;IACrE,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,GAAG,KAAK,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACzE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,CAAC,CAAC,SAAS,gBAAgB,EAC7D,QAAQ,EAAE,CAAC,GACV,CAAC,CAEH"}

package/dist/manifest.js

@@ -0,0 +1,30 @@
+/**
+ * The manifest an app author writes as `everyapp.config.ts`, typed:
+ *
+ *   import { defineEveryApp } from "@every-app/sdk";
+ *
+ *   export default defineEveryApp({
+ *     id: "notes",
+ *     name: "Notes",
+ *     resources: { d1: ["DB"] },
+ *   });
+ *
+ * Types only, and a leaf module: `cloudflare.config.ts` imports the manifest,
+ * and the Cloudflare Vite plugin hides from the Worker every file the config
+ * imports. The rules beyond the shape (which ids exist, which names are
+ * reserved, which scope sets a provider has) are the CLI's: `everyapp deploy`
+ * and `everyapp dev` validate the manifest and say what is wrong. The
+ * perimeter's schema (`@every-app/perimeter/manifest`) is held to this type
+ * by a test there.
+ *
+ * The Worker reads the manifest back as `env.EVERYAPP_MANIFEST`, which
+ * `everyAppWorker()` sets and `cf workers types` types from the file.
+ */
+/**
+ * Type `everyapp.config.ts` without widening it: the literal binding names
+ * stay, so `everyAppWorker()` types `env.DB` and `env.EVERYAPP_MANIFEST`
+ * from them. Returns the manifest as given.
+ */
+export function defineEveryApp(manifest) {
+    return manifest;
+}