@mccaskie-labs/workbench-ai 0.1.5 → 0.2.1

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @mccaskie-labs/workbench-ai
 
+## 0.2.1
+
+### Patch Changes
+
+- `WORKBENCH_GATEWAY_URL` must be an https URL (or http to localhost while developing), since the project key goes in every request's headers. A placeholder or other non-URL fails at start-up with `invalid_config`. Email: a `--wb-email-*` value mapped to the project's own `:root` variable (`var(--accent)`, or `var(--x, fallback)`) is filled in, and anything still holding `var()` is left out so the default stays, because mail apps don't support custom properties. `--wb-email-*` values are now taken only from plain `:root` rules, so a theme rule can't override every email.
+
+## 0.2.0
+
+### Minor Changes
+
+- Breaking: there is no built-in Gateway address any more (hard rule 13, `docs/install-plan.md`). `DEFAULT_GATEWAY_URL` is removed from workbench-config, `createAi` needs `url`, and `createMailer`'s gateway transport needs `gateway.url`. Pass the app's `WORKBENCH_GATEWAY_URL`, which Control writes into `wrangler.jsonc` when it creates a project. A missing address fails at start-up with `invalid_config` and the message "WORKBENCH_GATEWAY_URL is missing". The gateway manifest marks `WORKBENCH_GATEWAY_URL` required with no default.
+
+### Patch Changes
+
+- Updated dependencies
+  - @mccaskie-labs/workbench-config@0.2.0
+
 ## 0.1.5
 
 ### Patch Changes

package/README.md

@@ -10,14 +10,14 @@ npm install @mccaskie-labs/workbench-ai @mccaskie-labs/workbench-config zod
 import { createAi } from '@mccaskie-labs/workbench-ai'
 import { workbenchEnv } from '@mccaskie-labs/workbench-config'
 
-const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })
+const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env), url: env.WORKBENCH_GATEWAY_URL })
 const r = await ai.text({ model: 'claude-default', job: 'article.write', prompt })
 await save({ text: r.text, model: r.model, requestId: r.requestId })
 ```
 
 | Export | What it does |
 | --- | --- |
-| `createAi({ key, env, url?, fetch? })` | The client. Throws `invalid_config` at once if the key isn't for `env` (`wbk_dev_`, `wbk_stg_`, `wbk_prd_`) |
+| `createAi({ key, env, url, fetch? })` | The client. `url` is this install's Gateway address (`WORKBENCH_GATEWAY_URL`); there is no built-in one. Throws `invalid_config` at once if it is missing or the key isn't for `env` (`wbk_dev_`, `wbk_stg_`, `wbk_prd_`) |
 | `ai.text(req)` | One reply as text. Throws `refused` on a refusal and `truncated` on `max_tokens`; never returns partial text |
 | `ai.structured({ ...req, schema, mayLack? })` | JSON matching a zod schema, through structured outputs (`output_config.format`, not forced tool use). Asks once more for required fields left empty, except those in `mayLack`; throws `invalid_output` if they're still empty |
 | `ai.stream(req)` | Async iterable of Anthropic stream events, then `finalMessage()`, which throws like `text` |

package/dist/ai.js

@@ -1,6 +1,5 @@
 import Anthropic from "@anthropic-ai/sdk";
 import { zodOutputFormat } from "@anthropic-ai/sdk/helpers/zod";
-import { DEFAULT_GATEWAY_URL } from "@mccaskie-labs/workbench-config";
 import { createCapture, isGatewayMeta, REQUEST_ID_HEADER } from "./capture.js";
 import { errorFromGateway, WorkbenchAiError } from "./errors.js";
 import { gatewayFetch } from "./http.js";
@@ -34,7 +33,11 @@ export function createAi(opts) {
     if (!opts.key.startsWith(prefix)) {
         throw new WorkbenchAiError("invalid_config", `WORKBENCH_GATEWAY_KEY is not a ${env} key (expected the ${prefix} prefix)`);
     }
-    const url = (opts.url ?? DEFAULT_GATEWAY_URL).replace(/\/+$/, "");
+    // No built-in address: each Workbench install has its own Gateway (hard rule 13).
+    if (typeof opts.url !== "string" || opts.url === "") {
+        throw new WorkbenchAiError("invalid_config", "WORKBENCH_GATEWAY_URL is missing");
+    }
+    const url = gatewayBase(opts.url, (m) => new WorkbenchAiError("invalid_config", m));
     const baseFetch = opts.fetch ?? ((input, init) => globalThis.fetch(input, init));
     const client = (f) => new Anthropic({
         apiKey: opts.key,
@@ -356,3 +359,20 @@ function budgetFrom(body, requestId) {
         month: typeof b.month === "string" ? b.month : "",
     };
 }
+/**
+ * The Gateway's address, checked: the project key goes in every request's
+ * headers, so only https, or http to this computer while developing.
+ */
+function gatewayBase(raw, fail) {
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        throw fail("WORKBENCH_GATEWAY_URL isn't a URL");
+    }
+    const local = u.hostname === "localhost" || u.hostname === "127.0.0.1" || u.hostname === "[::1]";
+    if (u.protocol !== "https:" && !(u.protocol === "http:" && local))
+        throw fail("WORKBENCH_GATEWAY_URL must be an https URL");
+    return raw.replace(/\/+$/, "");
+}

package/dist/types.d.ts

@@ -10,8 +10,8 @@ export interface AiOptions {
     key: string;
     /** From `workbenchEnv(env)`. Must match the key's environment. */
     env: WorkbenchEnv;
-    /** Gateway base URL; defaults to `DEFAULT_GATEWAY_URL`. Leave unset outside tests. */
-    url?: string;
+    /** This install's Gateway address (`WORKBENCH_GATEWAY_URL`). There is no built-in one. */
+    url: string;
     fetch?: typeof fetch;
 }
 export interface TextRequest {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mccaskie-labs/workbench-ai",
-  "version": "0.1.5",
+  "version": "0.2.1",
   "description": "Claude through the Workbench Gateway: text, structured output, streaming and budget status, with no Anthropic key in the app. Refusals and truncations throw; createFakeAi for tests.",
   "license": "UNLICENSED",
   "type": "module",
@@ -36,7 +36,7 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^1.5.0",
-    "@mccaskie-labs/workbench-config": "^0.1.14"
+    "@mccaskie-labs/workbench-config": "^0.2.0"
   },
   "peerDependencies": {
     "zod": "^4.1.0"