@every-app/sdk 0.3.0-rc.4 → 0.3.0-rc.6

package/dist/cloudflare/worker.js

@@ -3,6 +3,10 @@ import fs from "node:fs";
 import path from "node:path";
 import { parseEnv } from "node:util";
 import { DEV_ISSUER, DEV_ORG_ID, DEV_PUBLIC_KEY_PEM } from "../dev/keypair.js";
+// The catalog's settings, generated from ../internal/capabilities.ts, which
+// this file must not import (see ./index.ts: the Vite plugin hides whatever
+// cloudflare.config.ts imports from the Worker).
+import { DEV_GATEWAY_KEYS } from "./catalogSettings.generated.js";
 import { sentinelDeployTarget, } from "./sentinel.js";
 /** The names of the manifest's `secrets`, whichever form each took. */
 function manifestSecretNames(manifest) {
@@ -12,131 +16,6 @@ function manifestSecretNames(manifest) {
 function manifestProviderIds(manifest) {
     return (manifest.providers ?? []).map((entry) => typeof entry === "string" ? entry : entry.id);
 }
-/**
- * The gateway secrets holding the keys of the AI providers and capabilities
- * an app may ask for, with the settings a provider needs besides its key
- * (Workers AI's account, a Basic username held as a setting, a host
- * setting). With no gateway in development, the SDK reaches them with the
- * developer's own values under the same names. A copy of the catalog's
- * settings (`capabilitySettings()` over every entry of
- * ../internal/capabilities.ts), which the Worker loads and this file must
- * not import (see ./index.ts: the Vite plugin hides whatever
- * cloudflare.config.ts imports from the Worker). worker.test.ts keeps the
- * copy in step: a provider added to the catalog is added here.
- */
-const DEV_GATEWAY_KEYS = {
-    providers: {
-        openai: ["OPENAI_API_KEY"],
-        openrouter: ["OPENROUTER_API_KEY"],
-        "workers-ai": ["WORKERS_AI_API_TOKEN", "CLOUDFLARE_ACCOUNT_ID"],
-        // Not Cloudflare AI Gateway (the proxy entry): dev goes to the
-        // providers directly, so its settings are the Gateway's alone.
-        // The AI providers of ../internal/catalog/inference.ts.
-        anthropic: ["ANTHROPIC_API_KEY"],
-        gemini: ["GEMINI_API_KEY"],
-        mistral: ["MISTRAL_API_KEY"],
-        groq: ["GROQ_API_KEY"],
-        cohere: ["COHERE_API_KEY"],
-    },
-    capabilities: {
-        dataforseo: ["DATAFORSEO_API_KEY"],
-        context: ["CONTEXT_API_KEY"],
-        // The sender, and the developer's own Email Sending account: set all
-        // but the name and sendEmail() really sends; otherwise it prints.
-        // Resend's key and EMAIL_PROVIDER pick the provider integrationStatus()
-        // names, as the gateway would.
-        // TODO(integration): the last two added by the email-providers lane
-        // (this file is outside its ownership list).
-        email: [
-            "EMAIL_FROM",
-            "EMAIL_FROM_NAME",
-            "EMAIL_REST_API_TOKEN",
-            "CLOUDFLARE_ACCOUNT_ID",
-            "RESEND_API_KEY",
-            "EMAIL_PROVIDER",
-        ],
-        // The organization's members: nothing to set; listMembers() answers
-        // from the dev identity.
-        members: [],
-        // OAuth clients: the id, the secret, and the instance a provider with
-        // no fixed host is on.
-        linkedin: ["LINKEDIN_CLIENT_ID", "LINKEDIN_CLIENT_SECRET"],
-        facebook: ["FACEBOOK_APP_ID", "FACEBOOK_APP_SECRET"],
-        instagram: ["INSTAGRAM_APP_ID", "INSTAGRAM_APP_SECRET"],
-        threads: ["THREADS_APP_ID", "THREADS_APP_SECRET"],
-        youtube: ["YOUTUBE_CLIENT_ID", "YOUTUBE_CLIENT_SECRET"],
-        tiktok: ["TIKTOK_CLIENT_ID", "TIKTOK_CLIENT_SECRET"],
-        "tiktok-business": [
-            "TIKTOK_BUSINESS_CLIENT_ID",
-            "TIKTOK_BUSINESS_CLIENT_SECRET",
-        ],
-        reddit: ["REDDIT_CLIENT_ID", "REDDIT_CLIENT_SECRET"],
-        pinterest: ["PINTEREST_CLIENT_ID", "PINTEREST_CLIENT_SECRET"],
-        discord: ["DISCORD_CLIENT_ID", "DISCORD_CLIENT_SECRET"],
-        slack: ["SLACK_CLIENT_ID", "SLACK_CLIENT_SECRET"],
-        mastodon: ["MASTODON_CLIENT_ID", "MASTODON_CLIENT_SECRET", "MASTODON_URL"],
-        kick: ["KICK_CLIENT_ID", "KICK_CLIENT_SECRET"],
-        twitch: ["TWITCH_CLIENT_ID", "TWITCH_CLIENT_SECRET"],
-        tumblr: ["TUMBLR_CLIENT_ID", "TUMBLR_CLIENT_SECRET"],
-        dribbble: ["DRIBBBLE_CLIENT_ID", "DRIBBBLE_CLIENT_SECRET"],
-        "google-workspace": [
-            "GOOGLE_WORKSPACE_CLIENT_ID",
-            "GOOGLE_WORKSPACE_CLIENT_SECRET",
-        ],
-        "microsoft-365": ["MICROSOFT_365_CLIENT_ID", "MICROSOFT_365_CLIENT_SECRET"],
-        // The API-key providers of ../internal/catalog/*.ts, in catalog order:
-        // the key, then a Basic username held as a setting, then the host
-        // setting of a provider whose host is the operator's.
-        stripe: ["STRIPE_API_KEY"],
-        lemonsqueezy: ["LEMONSQUEEZY_API_KEY"],
-        paddle: ["PADDLE_API_KEY"],
-        shopify: ["SHOPIFY_API_TOKEN", "SHOPIFY_HOST"],
-        plaid: ["PLAID_SECRET"],
-        attio: ["ATTIO_API_KEY"],
-        hubspot: ["HUBSPOT_API_TOKEN"],
-        pipedrive: ["PIPEDRIVE_API_TOKEN"],
-        airtable: ["AIRTABLE_API_TOKEN"],
-        notion: ["NOTION_API_TOKEN"],
-        postmark: ["POSTMARK_API_TOKEN"],
-        sendgrid: ["SENDGRID_API_KEY"],
-        twilio: ["TWILIO_API_SECRET", "TWILIO_API_KEY"],
-        intercom: ["INTERCOM_API_TOKEN"],
-        crisp: ["CRISP_API_KEY", "CRISP_API_IDENTIFIER"],
-        linear: ["LINEAR_API_KEY"],
-        github: ["GITHUB_API_TOKEN"],
-        gitlab: ["GITLAB_API_TOKEN"],
-        vercel: ["VERCEL_API_TOKEN"],
-        cloudflare: ["CLOUDFLARE_PROVIDER_API_TOKEN"],
-        posthog: ["POSTHOG_PERSONAL_API_KEY"],
-        mixpanel: [
-            "MIXPANEL_SERVICE_ACCOUNT_SECRET",
-            "MIXPANEL_SERVICE_ACCOUNT_USERNAME",
-        ],
-        segment: ["SEGMENT_WRITE_KEY"],
-        supabase: ["SUPABASE_SECRET_KEY", "SUPABASE_HOST"],
-        turso: ["TURSO_API_TOKEN"],
-        "turso-db": ["TURSO_DB_AUTH_TOKEN", "TURSO_DB_HOST"],
-        neon: ["NEON_API_KEY"],
-        pinecone: ["PINECONE_API_KEY", "PINECONE_HOST"],
-        mapbox: ["MAPBOX_ACCESS_TOKEN"],
-        openweather: ["OPENWEATHER_API_KEY"],
-        voyage: ["VOYAGE_API_KEY"],
-        perplexity: ["PERPLEXITY_API_KEY"],
-        jina: ["JINA_API_KEY"],
-        replicate: ["REPLICATE_API_TOKEN"],
-        huggingface: ["HUGGINGFACE_API_TOKEN"],
-        firecrawl: ["FIRECRAWL_API_KEY"],
-        exa: ["EXA_API_KEY"],
-        tavily: ["TAVILY_API_KEY"],
-        serper: ["SERPER_API_KEY"],
-        "brave-search": ["BRAVE_SEARCH_API_KEY"],
-        apify: ["APIFY_API_TOKEN"],
-        deepgram: ["DEEPGRAM_API_KEY"],
-        elevenlabs: ["ELEVENLABS_API_KEY"],
-        assemblyai: ["ASSEMBLYAI_API_KEY"],
-        newsapi: ["NEWSAPI_API_KEY"],
-    },
-};
 /**
  * Observability every Every App Worker ships with: logs (with invocation
  * logs), sampled traces and Workers Issues, with query strings redacted so
@@ -166,6 +45,19 @@ const BUILD_ENV = "EVERYAPP_BUILD";
 const RESERVED_SECRET_NAME = /^(GATEWAY_URL|CF_VERSION_METADATA|EVERYAPP_\w*|EVERY_APP_\w*|APP__\w*)$/i;
 const GATEWAY_WORKER_NAME = "every-app-gateway";
 const GATEWAY_ENTRYPOINT = "AppGateway";
+/**
+ * Where `everyapp dev` serves its launcher, which it passes to the app's dev
+ * server in EVERYAPP_DEV_GATEWAY_URL; its default address otherwise. The
+ * deployed Worker gets the Gateway's URL from the deploy instead.
+ */
+const DEV_GATEWAY_URL_ENV = "EVERYAPP_DEV_GATEWAY_URL";
+const DEFAULT_DEV_GATEWAY_URL = "http://localhost:8787";
+function devGatewayUrl() {
+    return {
+        type: "text",
+        value: process.env[DEV_GATEWAY_URL_ENV] || DEFAULT_DEV_GATEWAY_URL,
+    };
+}
 /**
  * The manifest's `capabilities` as the SDK's local-dev twin of the gateway
  * reads them: with no gateway to hold an OAuth client's calls to the scope
@@ -177,7 +69,7 @@ function devCapabilities(manifest) {
 /**
  * The binding the dev Worker gets the specs of providers registered on a
  * gateway in (`DEV_PROVIDERS_ENV` in ../internal/devProviders.ts; a copy,
- * kept in step by a test, for the reason {@link DEV_GATEWAY_KEYS} is one).
+ * kept in step by a test, since this file may not import ../internal).
  */
 const DEV_PROVIDERS_ENV = "EVERYAPP_DEV_PROVIDERS";
 /**
@@ -291,6 +183,12 @@ export function everyAppWorker(options) {
     const { deploy, name } = appWorkerName(options, "everyAppWorker");
     const env = {
         EVERYAPP_APP_ID: { type: "text", value: manifest.id },
+        // The manifest itself, for a page that shows what the app asked for:
+        // the Worker can't import everyapp.config.ts (see ./index.ts).
+        EVERYAPP_MANIFEST: {
+            type: "json",
+            value: manifest,
+        },
         CF_VERSION_METADATA: { type: "version-metadata" },
     };
     if (deploy) {
@@ -317,6 +215,7 @@ export function everyAppWorker(options) {
             value: JSON.stringify([DEV_PUBLIC_KEY_PEM]),
         };
         env["EVERYAPP_IDENTITY_ISSUER"] = { type: "text", value: DEV_ISSUER };
+        env["GATEWAY_URL"] = devGatewayUrl();
         // The stub gateway's organization, as the deploy's secret would be, so
         // background work's withOrganization(env.EVERY_APP_ORG_ID, …) runs
         // here too. Not a pin: under the dev opt-in everyApp() enforces none,
@@ -436,6 +335,7 @@ export function everyAppAuxiliaryWorker(options) {
     else {
         env["EVERYAPP_DEV"] = { type: "text", value: "1" };
         env["EVERYAPP_DEV_CAPABILITIES"] = devCapabilities(manifest);
+        env["GATEWAY_URL"] = devGatewayUrl();
         env["EVERY_APP_ORG_ID"] = { type: "text", value: DEV_ORG_ID };
         addDevProviders(env, options.root);
     }
@@ -905,18 +805,25 @@ taken) {
     return { bindings, exports };
 }
 /**
- * Check the names of the manifest's `secrets`, and in dev declare the ones
- * set locally, with the developer's own keys for the manifest's providers
- * and capabilities.
+ * Check the names of the manifest's `secrets` and `settings`, and in dev
+ * declare the ones set locally (a setting that isn't, with its default),
+ * with the developer's own keys for the manifest's providers and
+ * capabilities.
  */
 function addSecrets(env, options, deploy) {
-    const secrets = manifestSecretNames(options.manifest);
+    const settings = options.manifest.settings ?? [];
+    const secrets = [
+        ...manifestSecretNames(options.manifest),
+        ...settings.map((setting) => setting.name),
+    ];
+    const settingNames = new Set(settings.map((setting) => setting.name));
     for (const secret of secrets) {
+        const field = settingNames.has(secret) ? "settings" : "secrets";
         if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(secret)) {
-            throw new Error(`secrets: "${secret}" isn't a valid binding name.`);
+            throw new Error(`${field}: "${secret}" isn't a valid binding name.`);
         }
         if (env[secret] || RESERVED_SECRET_NAME.test(secret)) {
-            throw new Error(`secrets: ${secret} is a name the deploy sets or a binding it builds.`);
+            throw new Error(`${field}: ${secret} is a name the deploy sets or a binding it builds.`);
         }
     }
     if (!deploy) {
@@ -933,6 +840,12 @@ function addSecrets(env, options, deploy) {
         for (const secret of locallySetSecrets(options.root ?? process.cwd(), options.ctx.mode ?? "development", [...names].filter((name) => !env[name]))) {
             env[secret] = { type: "secret" };
         }
+        // A setting nobody set locally reads its default, as a deployed one does.
+        for (const setting of settings) {
+            if (!env[setting.name] && setting.default !== undefined) {
+                env[setting.name] = { type: "text", value: setting.default };
+            }
+        }
     }
 }
 /** The {@link DEV_GATEWAY_KEYS} of the manifest's providers and capabilities. */

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @every-app/sdk — what `everyapp.config.ts` imports: `defineEveryApp` and
+ * the manifest's types. A leaf, like the config itself (see ./manifest.ts).
+ */
+export { defineEveryApp, type EveryAppCapabilityEntry, type EveryAppClassResource, type EveryAppManifest, type EveryAppPublicRoute, type EveryAppQueueConsumer, type EveryAppResources, type EveryAppSecretEntry, type EveryAppSettingEntry, type EveryAppSettingNeed, type EveryAppWorkerLimits, } from "./manifest.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,cAAc,EACd,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+/**
+ * @every-app/sdk — what `everyapp.config.ts` imports: `defineEveryApp` and
+ * the manifest's types. A leaf, like the config itself (see ./manifest.ts).
+ */
+export { defineEveryApp, } from "./manifest.js";

package/dist/internal/aiDefault.d.ts

@@ -15,6 +15,11 @@
  * and fronts whichever provider the default resolves to when
  * `AI_GATEWAY_ID` is set (./capabilities.ts, `aig`).
  *
+ * The models resolve the same way: the operator's model setting for the
+ * provider (`everyapp ai model <provider> --chat … --embeddings …`,
+ * `org_settings.ai_models`), else the catalog entry's seed (`chat.seedModel`,
+ * `embeddings.seedModel`). Nothing reads a seed except through here.
+ *
  * Everything here is pure: what is set is asked of the caller (`isSet`),
  * which reads the Gateway's env, the Worker's secret names, or `.dev.vars`.
  */
@@ -38,19 +43,54 @@ export declare const AI_DEFAULT_ROUTES: {
     readonly embeddings: "/v1/embeddings";
 };
 export type AiDefaultRoute = keyof typeof AI_DEFAULT_ROUTES;
-/** What the operator stored: a provider, and the model to fill in when the app names none. */
+/**
+ * A choice as typed (`everyapp ai default openrouter/anthropic/claude-sonnet-5.5`,
+ * the Usage page's dialog, `everyapp_ai_default`): the provider, and the
+ * chat model to store for it. The provider goes to `org_settings.ai_default`,
+ * the model to that provider's `chat` in `org_settings.ai_models`.
+ */
 export interface AiDefaultChoice {
     provider: string;
     model?: string;
 }
+/** The operator's models for one provider; a field left out serves the seed. */
+export interface AiModelSetting {
+    chat?: string;
+    embeddings?: string;
+}
+/** The operator's models by provider id (`org_settings.ai_models`, JSON). */
+export type AiModelSettings = Readonly<Record<string, AiModelSetting>>;
+/** A change to one provider's models: a name sets it, null puts the seed back, absent leaves it. */
+export interface AiModelPatch {
+    chat?: string | null;
+    embeddings?: string | null;
+}
+/** Whether `value` can be a model id: 1 to 200 characters, no surrounding or control whitespace. */
+export declare function isAiModelName(value: string): boolean;
 /**
- * `openrouter` or `openrouter/anthropic/claude-haiku-5.5` as a choice:
+ * `org_settings.ai_models` as stored: a JSON object of provider id →
+ * `{ chat?, embeddings? }`. Anything else (null, malformed JSON, a field
+ * that isn't a model name) reads as no setting, so the seed serves.
+ */
+export declare function parseAiModelSettings(value: string | null | undefined): AiModelSettings;
+/** The stored text of the settings, providers sorted; null when nothing is set. */
+export declare function formatAiModelSettings(settings: AiModelSettings): string | null;
+/** `settings` with one provider's models changed by `patch`. */
+export declare function withAiModelSetting(settings: AiModelSettings, provider: string, patch: AiModelPatch): AiModelSettings;
+/**
+ * `openrouter` or `openrouter/anthropic/claude-haiku-5.5` as typed:
  * the provider id up to the first slash, the model after it (a model id
  * may hold slashes of its own). Null for blank or malformed text.
  */
 export declare function parseAiDefaultChoice(value: string | null | undefined): AiDefaultChoice | null;
-/** The stored text of a choice: `provider` or `provider/model`. */
+/** The text of a choice: `provider` or `provider/model`. */
 export declare function formatAiDefaultChoice(choice: AiDefaultChoice): string;
+/**
+ * The provider id `org_settings.ai_default` holds, or null. The column
+ * holds the provider alone (its models are in `ai_models`); text after a
+ * first slash is not read.
+ */
+export declare function parseAiDefaultProvider(value: string | null | undefined): string | null;
 /** Whether `name` holds a value, as the Gateway's env or a secret list says. */
 export type IsSet = (name: string) => boolean;
 /** An `ai` entry the default may resolve to: not the proxy, with a chat route. */
@@ -77,8 +117,15 @@ export interface AiDefaultCandidate {
     /** The Gateway settings it needs; what to set when it isn't configured. */
     settings: string[];
     configured: boolean;
-    /** The model the Gateway fills in when the app names none. */
+    /** The chat model the Gateway fills in when the app names none: the operator's setting, else the seed. */
     model: string;
+    /** The embeddings model, the same way; absent when the entry has no embeddings route. */
+    embeddingsModel?: string;
+    /** The catalog's seeds: what serves where the operator set no model. */
+    seed: {
+        chat: string;
+        embeddings?: string;
+    };
     /** Through Cloudflare AI Gateway, as things are set now. */
     viaAiGateway: boolean;
     embeddings: boolean;
@@ -94,8 +141,15 @@ export type AiDefaultSource =
 export interface AiDefaultResolution {
     provider: string;
     label: string;
-    /** The model the default serves: the choice's, else the entry's. */
+    /** The chat model the default serves: the operator's setting for the provider, else the seed. */
     model: string;
+    /** The embeddings model, the same way; absent when the provider has no embeddings route. */
+    embeddingsModel?: string;
+    /** The provider's seeds. */
+    seed: {
+        chat: string;
+        embeddings?: string;
+    };
     source: AiDefaultSource;
     /** Every setting the provider needs is set, so the default serves. */
     configured: boolean;
@@ -118,9 +172,15 @@ export interface AiDefaultResolution {
  * then any other `ai` entry of `lookup` with a chat route (a registered
  * row, one day), each with its state.
  */
-export declare function aiDefaultCandidates(isSet: IsSet, lookup?: CapabilityLookup): AiDefaultCandidate[];
+export declare function aiDefaultCandidates(isSet: IsSet, lookup?: CapabilityLookup, models?: AiModelSettings): AiDefaultCandidate[];
 /** Why `choice.provider` can't be the default, or null when it can. */
 export declare function aiDefaultChoiceProblem(choice: AiDefaultChoice, lookup?: CapabilityLookup): string | null;
+/**
+ * Why `patch` can't be stored for `provider`, or null when it can: the
+ * provider must be one the default can be, a model name must be a model
+ * name, and an embeddings model needs the entry's embeddings route.
+ */
+export declare function aiModelPatchProblem(provider: string, patch: AiModelPatch, lookup?: CapabilityLookup): string | null;
 /**
  * The Gateway's effective default, from the stored choice (or none) and
  * what is set. A choice that names a provider which isn't configured
@@ -129,7 +189,10 @@ export declare function aiDefaultChoiceProblem(choice: AiDefaultChoice, lookup?:
  * `problem` and the order decides.
  */
 export declare function resolveAiDefault(input: {
-    choice: AiDefaultChoice | null;
+    /** The stored provider (`org_settings.ai_default`), or null for the shipped order. */
+    provider: string | null;
+    /** The operator's models by provider (`org_settings.ai_models`); none: the seeds serve. */
+    models?: AiModelSettings;
     isSet: IsSet;
     lookup?: CapabilityLookup;
 }): AiDefaultResolution;

package/dist/internal/aiDefault.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiDefault.d.ts","sourceRoot":"","sources":["../../src/internal/aiDefault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAE3B,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAE7C,gEAAgE;AAChE,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAEhD,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,qDAGtB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAQ7C,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAE1C,qEAAqE;AACrE,eAAO,MAAM,iBAAiB;;;CAGpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAE5D,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,eAAe,GAAG,IAAI,CAMxB;AAED,mEAAmE;AACnE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAErE;AAED,gFAAgF;AAChF,MAAM,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;AAE9C,kFAAkF;AAClF,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3E,wBAAgB,cAAc,CAC5B,UAAU,EAAE,UAAU,GAAG,SAAS,GACjC,UAAU,IAAI,mBAAmB,CAMnC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,oBAAoB,GAAG,MAAM,EAAE,CAK7E;AAED,oDAAoD;AACpD,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,oBAAoB,EAChC,KAAK,EAAE,KAAK,GACX,OAAO,CAET;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAEzD;AAED,yGAAyG;AACzG,wBAAgB,YAAY,CAC1B,UAAU,EAAE,oBAAoB,EAChC,KAAK,EAAE,KAAK,GACX,OAAO,CAET;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,4CAA4C;AAC5C,MAAM,MAAM,eAAe;AACzB,oCAAoC;AAClC,SAAS;AACX,gEAAgE;GAC9D,OAAO;AACT,uEAAuE;GACrE,MAAM,CAAC;AAEX,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,UAAU,EAAE,OAAO,CAAC;IACpB,qFAAqF;IACrF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,GAAG,EAAE,YAAY,GAAG,QAAQ,CAAC;IAC7B,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAkBD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,KAAK,EACZ,MAAM,GAAE,gBAA0B,GACjC,kBAAkB,EAAE,CAWtB;AAED,uEAAuE;AACvE,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,eAAe,EACvB,MAAM,GAAE,gBAA0B,GACjC,MAAM,GAAG,IAAI,CAcf;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B,GAAG,mBAAmB,CAuDtB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,mBAAmB,GAAG,MAAM,CAc1E"}
+{"version":3,"file":"aiDefault.d.ts","sourceRoot":"","sources":["../../src/internal/aiDefault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAE3B,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAE7C,gEAAgE;AAChE,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAEhD,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,qDAGtB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAQ7C,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAE1C,qEAAqE;AACrE,eAAO,MAAM,iBAAiB;;;CAGpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAEvE,oGAAoG;AACpG,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,oGAAoG;AACpG,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAOpD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,eAAe,CAwBjB;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,eAAe,GACxB,MAAM,GAAG,IAAI,CAuBf;AAED,gEAAgE;AAChE,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,GAClB,eAAe,CAajB;AAKD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,eAAe,GAAG,IAAI,CAMxB;AAED,4DAA4D;AAC5D,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAErE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAEf;AAED,gFAAgF;AAChF,MAAM,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;AAE9C,kFAAkF;AAClF,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3E,wBAAgB,cAAc,CAC5B,UAAU,EAAE,UAAU,GAAG,SAAS,GACjC,UAAU,IAAI,mBAAmB,CAMnC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,oBAAoB,GAAG,MAAM,EAAE,CAK7E;AAED,oDAAoD;AACpD,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,oBAAoB,EAChC,KAAK,EAAE,KAAK,GACX,OAAO,CAET;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAEzD;AAED,yGAAyG;AACzG,wBAAgB,YAAY,CAC1B,UAAU,EAAE,oBAAoB,EAChC,KAAK,EAAE,KAAK,GACX,OAAO,CAET;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,0GAA0G;IAC1G,KAAK,EAAE,MAAM,CAAC;IACd,yFAAyF;IACzF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,4DAA4D;IAC5D,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,4CAA4C;AAC5C,MAAM,MAAM,eAAe;AACzB,oCAAoC;AAClC,SAAS;AACX,gEAAgE;GAC9D,OAAO;AACT,uEAAuE;GACrE,MAAM,CAAC;AAEX,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,iGAAiG;IACjG,KAAK,EAAE,MAAM,CAAC;IACd,4FAA4F;IAC5F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4BAA4B;IAC5B,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,MAAM,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,UAAU,EAAE,OAAO,CAAC;IACpB,qFAAqF;IACrF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,GAAG,EAAE,YAAY,GAAG,QAAQ,CAAC;IAC7B,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAuCD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,KAAK,EACZ,MAAM,GAAE,gBAA0B,EAClC,MAAM,GAAE,eAAoB,GAC3B,kBAAkB,EAAE,CActB;AAED,uEAAuE;AACvE,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,eAAe,EACvB,MAAM,GAAE,gBAA0B,GACjC,MAAM,GAAG,IAAI,CAcf;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EACnB,MAAM,GAAE,gBAA0B,GACjC,MAAM,GAAG,IAAI,CAef;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,sFAAsF;IACtF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B,GAAG,mBAAmB,CA4CtB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,mBAAmB,GAAG,MAAM,CAc1E"}

package/dist/internal/aiDefault.js

@@ -15,6 +15,11 @@
  * and fronts whichever provider the default resolves to when
  * `AI_GATEWAY_ID` is set (./capabilities.ts, `aig`).
  *
+ * The models resolve the same way: the operator's model setting for the
+ * provider (`everyapp ai model <provider> --chat … --embeddings …`,
+ * `org_settings.ai_models`), else the catalog entry's seed (`chat.seedModel`,
+ * `embeddings.seedModel`). Nothing reads a seed except through here.
+ *
  * Everything here is pure: what is set is asked of the caller (`isSet`),
  * which reads the Gateway's env, the Worker's secret names, or `.dev.vars`.
  */
@@ -48,10 +53,85 @@ export const AI_DEFAULT_ROUTES = {
     chat: "/v1/chat/completions",
     embeddings: "/v1/embeddings",
 };
-/** A stored choice must name a provider id; the model is free text after the first slash. */
+/** Whether `value` can be a model id: 1 to 200 characters, no surrounding or control whitespace. */
+export function isAiModelName(value) {
+    return (value.length >= 1 &&
+        value.length <= 200 &&
+        value.trim() === value &&
+        !/[\u0000-\u001f\u007f]/.test(value));
+}
+/**
+ * `org_settings.ai_models` as stored: a JSON object of provider id →
+ * `{ chat?, embeddings? }`. Anything else (null, malformed JSON, a field
+ * that isn't a model name) reads as no setting, so the seed serves.
+ */
+export function parseAiModelSettings(value) {
+    if (typeof value !== "string" || value.trim() === "")
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        return {};
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        return {};
+    const settings = {};
+    for (const [provider, entry] of Object.entries(parsed)) {
+        if (!entry || typeof entry !== "object" || Array.isArray(entry))
+            continue;
+        const setting = {};
+        for (const kind of ["chat", "embeddings"]) {
+            const model = entry[kind];
+            if (typeof model === "string" && isAiModelName(model)) {
+                setting[kind] = model;
+            }
+        }
+        if (setting.chat !== undefined || setting.embeddings !== undefined) {
+            settings[provider] = setting;
+        }
+    }
+    return settings;
+}
+/** The stored text of the settings, providers sorted; null when nothing is set. */
+export function formatAiModelSettings(settings) {
+    const providers = Object.keys(settings)
+        .filter((id) => settings[id]?.chat !== undefined ||
+        settings[id]?.embeddings !== undefined)
+        .sort();
+    if (providers.length === 0)
+        return null;
+    return JSON.stringify(Object.fromEntries(providers.map((id) => {
+        const { chat, embeddings } = settings[id];
+        return [
+            id,
+            {
+                ...(chat === undefined ? {} : { chat }),
+                ...(embeddings === undefined ? {} : { embeddings }),
+            },
+        ];
+    })));
+}
+/** `settings` with one provider's models changed by `patch`. */
+export function withAiModelSetting(settings, provider, patch) {
+    const next = { ...settings[provider] };
+    for (const kind of ["chat", "embeddings"]) {
+        const value = patch[kind];
+        if (value === null)
+            delete next[kind];
+        else if (value !== undefined)
+            next[kind] = value;
+    }
+    const rest = Object.fromEntries(Object.entries(settings).filter(([id]) => id !== provider));
+    return next.chat === undefined && next.embeddings === undefined
+        ? rest
+        : { ...rest, [provider]: next };
+}
+/** A choice must name a provider id; the model is free text after the first slash. */
 const CHOICE = /^([a-z][a-z0-9-]{1,39})(?:\/(.{1,200}))?$/;
 /**
- * `openrouter` or `openrouter/anthropic/claude-haiku-5.5` as a choice:
+ * `openrouter` or `openrouter/anthropic/claude-haiku-5.5` as typed:
  * the provider id up to the first slash, the model after it (a model id
  * may hold slashes of its own). Null for blank or malformed text.
  */
@@ -64,10 +144,18 @@ export function parseAiDefaultChoice(value) {
     const model = match[2]?.trim();
     return model ? { provider: match[1], model } : { provider: match[1] };
 }
-/** The stored text of a choice: `provider` or `provider/model`. */
+/** The text of a choice: `provider` or `provider/model`. */
 export function formatAiDefaultChoice(choice) {
     return choice.model ? `${choice.provider}/${choice.model}` : choice.provider;
 }
+/**
+ * The provider id `org_settings.ai_default` holds, or null. The column
+ * holds the provider alone (its models are in `ai_models`); text after a
+ * first slash is not read.
+ */
+export function parseAiDefaultProvider(value) {
+    return parseAiDefaultChoice(value)?.provider ?? null;
+}
 export function canBeAiDefault(capability) {
     return (capability?.mode === "ai" &&
         capability.kind !== "proxy" &&
@@ -96,13 +184,28 @@ export function aiGatewayConfigured(isSet) {
 export function viaAiGateway(capability, isSet) {
     return capability.aig !== undefined && aiGatewayConfigured(isSet);
 }
-function candidateOf(id, capability, isSet) {
+/** The provider's models: the operator's setting, else the seed. */
+function modelsOf(id, capability, models) {
+    const setting = models[id];
+    const { chat, embeddings } = capability;
+    return {
+        model: setting?.chat ?? chat.seedModel,
+        ...(embeddings
+            ? { embeddingsModel: setting?.embeddings ?? embeddings.seedModel }
+            : {}),
+        seed: {
+            chat: chat.seedModel,
+            ...(embeddings ? { embeddings: embeddings.seedModel } : {}),
+        },
+    };
+}
+function candidateOf(id, capability, isSet, models) {
     return {
         id,
         label: capability.label,
         settings: aiRequiredSettings(capability),
         configured: aiProviderConfigured(capability, isSet),
-        model: capability.chat.model,
+        ...modelsOf(id, capability, models),
         viaAiGateway: viaAiGateway(capability, isSet),
         embeddings: capability.embeddings !== undefined,
     };
@@ -112,15 +215,18 @@ function candidateOf(id, capability, isSet) {
  * then any other `ai` entry of `lookup` with a chat route (a registered
  * row, one day), each with its state.
  */
-export function aiDefaultCandidates(isSet, lookup = CATALOG) {
+export function aiDefaultCandidates(isSet, lookup = CATALOG, models = {}) {
     const ids = [
         ...AI_DEFAULT_ORDER,
         ...lookup.ids().filter((id) => !AI_DEFAULT_ORDER.includes(id)),
     ];
     return ids.flatMap((id) => {
         const capability = lookup.get(id);
+        // A registered row whose key isn't bound to the hosts it has now reads
+        // as unset everywhere (`providers.value-bound-to-hosts`).
+        const set = lookup.bound && !lookup.bound(id) ? () => false : isSet;
         return canBeAiDefault(capability)
-            ? [candidateOf(id, capability, isSet)]
+            ? [candidateOf(id, capability, set, models)]
             : [];
     });
 }
@@ -140,6 +246,29 @@ export function aiDefaultChoiceProblem(choice, lookup = CATALOG) {
     }
     return null;
 }
+/**
+ * Why `patch` can't be stored for `provider`, or null when it can: the
+ * provider must be one the default can be, a model name must be a model
+ * name, and an embeddings model needs the entry's embeddings route.
+ */
+export function aiModelPatchProblem(provider, patch, lookup = CATALOG) {
+    const why = aiDefaultChoiceProblem({ provider }, lookup);
+    if (why)
+        return why;
+    const capability = lookup.get(provider);
+    if (!canBeAiDefault(capability))
+        return `${provider} can't serve the default`;
+    for (const kind of ["chat", "embeddings"]) {
+        const value = patch[kind];
+        if (typeof value === "string" && !isAiModelName(value)) {
+            return `${JSON.stringify(value)} isn't a model id: 1 to 200 characters, no surrounding spaces`;
+        }
+    }
+    if (typeof patch.embeddings === "string" && !capability.embeddings) {
+        return `${capability.label} has no embeddings route, so it serves no embeddings model`;
+    }
+    return null;
+}
 /**
  * The Gateway's effective default, from the stored choice (or none) and
  * what is set. A choice that names a provider which isn't configured
@@ -149,12 +278,13 @@ export function aiDefaultChoiceProblem(choice, lookup = CATALOG) {
  */
 export function resolveAiDefault(input) {
     const lookup = input.lookup ?? CATALOG;
+    const models = input.models ?? {};
     const { isSet } = input;
-    const candidates = aiDefaultCandidates(isSet, lookup);
-    const resolve = (id, capability, source, model, problem) => ({
+    const candidates = aiDefaultCandidates(isSet, lookup, models);
+    const resolve = (id, capability, source, problem) => ({
         provider: id,
         label: capability.label,
-        model: model ?? capability.chat.model,
+        ...modelsOf(id, capability, models),
         source,
         configured: aiProviderConfigured(capability, isSet),
         settings: aiRequiredSettings(capability),
@@ -168,11 +298,11 @@ export function resolveAiDefault(input) {
         ...(problem ? { problem } : {}),
     });
     let problem;
-    if (input.choice) {
-        const capability = lookup.get(input.choice.provider);
-        const why = aiDefaultChoiceProblem(input.choice, lookup);
+    if (input.provider) {
+        const capability = lookup.get(input.provider);
+        const why = aiDefaultChoiceProblem({ provider: input.provider }, lookup);
         if (!why && canBeAiDefault(capability)) {
-            return resolve(input.choice.provider, capability, "setting", input.choice.model);
+            return resolve(input.provider, capability, "setting");
         }
         problem = why ?? undefined;
     }
@@ -184,7 +314,7 @@ export function resolveAiDefault(input) {
     const capability = lookup.get(first.id);
     if (!canBeAiDefault(capability))
         throw new Error("unreachable");
-    return resolve(first.id, capability, configured ? "order" : "none", undefined, problem);
+    return resolve(first.id, capability, configured ? "order" : "none", problem);
 }
 /**
  * The sentence setup shows for an unconfigured default: the one key to

package/dist/internal/aiProviders.d.ts

@@ -32,7 +32,9 @@ export type DevAiProvider = AiProviderId;
 /** The fallback's view of one `ai` catalog entry. */
 export declare function devAiProviderSpec(capability: AiProviderCapability): DevAiProviderSpec;
 export declare const DEV_AI_PROVIDERS: Readonly<Record<DevAiProvider, DevAiProviderSpec>>;
-export declare function devAiProvider(name: string): DevAiProviderSpec | undefined;
+export declare function devAiProvider(name: string, 
+/** The dev Worker's bindings: a registered `ai` spec under `.everyapp/providers/<id>.json` resolves from them. */
+values?: Readonly<Record<string, unknown>>): DevAiProviderSpec | undefined;
 /** Every setting a provider needs, its key first: the names `.dev.vars` and the gateway use. */
 export declare function aiProviderSettings(spec: DevAiProviderSpec): string[];
 /**