@mccaskie-labs/workbench-config 0.1.40 → 0.2.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @mccaskie-labs/workbench-config
 
+## 0.2.0
+
+### Minor Changes
+
+- Breaking: there is no built-in Gateway address any more (hard rule 13, `docs/install-plan.md`). `DEFAULT_GATEWAY_URL` is removed from workbench-config, `createAi` needs `url`, and `createMailer`'s gateway transport needs `gateway.url`. Pass the app's `WORKBENCH_GATEWAY_URL`, which Control writes into `wrangler.jsonc` when it creates a project. A missing address fails at start-up with `invalid_config` and the message "WORKBENCH_GATEWAY_URL is missing". The gateway manifest marks `WORKBENCH_GATEWAY_URL` required with no default.
+
+## 0.1.41
+
+### Patch Changes
+
+- The email-sending and email-inbound guides and manifests no longer name one install's domain. They say `<projects domain>` and tell Claude to read it from the project's README (hard rule 13).
+
 ## 0.1.40
 
 ### Patch Changes

package/README.md

@@ -30,7 +30,6 @@ const { WORKBENCH_GATEWAY_KEY } = config.parse(env)
 | `defineBrand(json)`, `brandSchema`, `resolveBrand`, `BRAND_DEFAULTS`, `BRAND_FILE` | The app's brand file, `brand.json` at the repo root: `name`, `siteUrl` (https), `logo.url` (https PNG, JPEG or SVG; optional `alt`, `width`, `height`), `colours.primary` (`#rrggbb`; `text`, `background`, `muted` default), optional `fonts.heading`/`fonts.body` (`{ family, url? }`, `url` an https stylesheet), `supportEmail` and `footer`. Unknown keys fail. Account emails, PDFs and Supabase's sign-in emails all read it |
 | `checkLogo(bytes)`, `placeholderLogo(name, colour)`, `colourForId(id)`, `parseColour`, `whiteContrast`, `shownSize`, `LOGO_PATHS`, `MAX_LOGO_BYTES`, `BrandAssetError` | Setting a brand from an upload: the logo is checked by its own bytes (PNG or JPEG, at most 256 KiB; SVG refused because Gmail and Outlook don't show it), a project with no logo gets its initials on its colour as a 96 × 96 PNG, and a project with no colour gets a steady one from its id that white text reads on (WCAG 4.5:1). Runs in Workers, the browser and Node |
 | `VENDOR_SETTINGS`, `resolveVendorSettings(file, env)`, `vendorSettingsFileSchema`, `VENDOR_SETTINGS_FILE`, `SEND_EMAIL_HOOK`, `SEND_EMAIL_HOOK_PATH`, `SEND_EMAIL_HOOK_SECRET` | The vendor settings baseline: settings that live in a vendor dashboard (field, value, where it is, what breaks if it changes). A project changes a row in `vendor-settings.json` at its repo root, with a reason. Control applies it with `vendor_settings_apply` and compares it every day |
-| `DEFAULT_GATEWAY_URL` | `https://gateway.mccaskielabs.dev` |
 
 `npx workbench-config check [dir]` compares the variable names in `.dev.vars` with `.dev.vars.example` and prints names only.
 

package/capabilities/ai.json

@@ -95,7 +95,7 @@
       "title": "One-shot text",
       "lang": "ts",
       "probe": "ai.text.claude-default",
-      "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst r = await ai.text({ model: 'claude-default', job: 'article.write', prompt })\nawait save({ text: r.text, model: r.model, requestId: r.requestId })"
+      "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env), url: env.WORKBENCH_GATEWAY_URL })\nconst r = await ai.text({ model: 'claude-default', job: 'article.write', prompt })\nawait save({ text: r.text, model: r.model, requestId: r.requestId })"
     },
     {
       "id": "ai.example.voice",

package/capabilities/email-inbound.json

@@ -105,7 +105,7 @@
       "title": "Store inbound mail",
       "lang": "ts",
       "probe": "email-inbound.roundtrip",
-      "code": "export async function handleEmail(mail, env, ctx, { reject }) {\n  if (!mail.to.some((t) => t.address === 'inbox@wb-probe-staging.mccaskielabs.app')) return reject('Unknown mailbox')\n  await saveMail(env, { message_id: mail.message_id, subject: mail.subject, text: mail.text, received_at: mail.received_at })\n}"
+      "code": "export async function handleEmail(mail, env, ctx, { reject }) {\n  if (!mail.to.some((t) => t.address === 'inbox@<id>-staging.<projects domain>')) return reject('Unknown mailbox')\n  await saveMail(env, { message_id: mail.message_id, subject: mail.subject, text: mail.text, received_at: mail.received_at })\n}"
     }
   ],
   "probes": [

package/capabilities/email-inbound.md

@@ -1,6 +1,6 @@
 # Inbound email
 
-A project receives mail on a domain in its namespace, for example `wb-probe-staging.mccaskielabs.app`, and each address it uses is routed to one of its own Workers. Project-owned zones such as `wbprobe.com` join the namespace with `cf_zone_attach` (phase 6).
+A project receives mail on a domain in its namespace, for example `<id>-staging.<projects domain>`, and each address it uses is routed to one of its own Workers. `<projects domain>` is the domain this Workbench install keeps its projects under: it is the last part of the project's staging address in its README, so read it there and never assume one. A domain the project owns joins the namespace with `cf_zone_attach` (phase 6).
 
 ## Setting it up (Claude, through Control)
 

package/capabilities/email-sending.json

@@ -24,13 +24,13 @@
     { "code": "missing_permission", "http": 403, "retryable": false, "meaning": "Control's Cloudflare token lacks Email Sending (edit)" }
   ],
   "rules": [
-    { "id": "email-sending.namespace-only", "kind": "must", "text": "Onboard a domain in the project's own namespace, for example mail.<id>.mccaskielabs.app. Project-owned zones such as wbprobe.com follow cf_zone_attach (step 6.1).", "enforced_by": "control", "probe": "email-sending.onboard" },
+    { "id": "email-sending.namespace-only", "kind": "must", "text": "Onboard a domain in the project's own namespace, for example mail.<id>.<projects domain> (the domain this install keeps its projects under). A domain the project owns follows cf_zone_attach (step 6.1).", "enforced_by": "control", "probe": "email-sending.onboard" },
     { "id": "email-sending.onboard-before-sender", "kind": "must", "text": "Onboard the domain before adding senders on it. gw_sender_add refuses a domain the project hasn't onboarded.", "enforced_by": "control", "probe": "email-sending.sender-add" },
     { "id": "email-sending.never-adopt", "kind": "must_not", "text": "Expect Control to take over a domain onboarded by hand. It refuses with name_taken.", "enforced_by": "control", "probe": "email-sending.onboard" },
     { "id": "email-sending.verified-over-doh", "kind": "must", "text": "Treat a domain as ready only when cf_email_sending_status says ready: every expected record is in the zone and visible over DNS-over-HTTPS.", "enforced_by": "control", "probe": "email-sending.status" }
   ],
   "probes": [
-    { "id": "email-sending.onboard", "half": "drill", "expect": "pass", "cost_hint_usd": 0, "note": "cf_email_sending_onboard on mail.<id>.mccaskielabs.app; a second call changes nothing" },
+    { "id": "email-sending.onboard", "half": "drill", "expect": "pass", "cost_hint_usd": 0, "note": "cf_email_sending_onboard on mail.<id>.<projects domain>; a second call changes nothing" },
     { "id": "email-sending.status", "half": "drill", "expect": "pass", "cost_hint_usd": 0 },
     { "id": "email-sending.sender-add", "half": "drill", "expect": "pass", "cost_hint_usd": 0, "note": "Then a runtime send from the new address (email.send.transactional)" },
     { "id": "email-sending.out-of-scope", "half": "drill", "expect": "refused_as_expected", "refusal": "out_of_scope", "cost_hint_usd": 0, "note": "Another project's namespace" }

package/capabilities/email-sending.md

@@ -1,9 +1,9 @@
 # Email sending domains
 
-A project sends from addresses on a domain Control onboarded for it. Today that is a domain in the project's namespace in `mccaskielabs.app`, usually `mail.<id>.mccaskielabs.app`. Project-owned zones such as `wbprobe.com` follow `cf_zone_attach` in step 6.1.
+A project sends from addresses on a domain Control onboarded for it. Today that is a domain in the project's namespace under the install's projects domain, usually `mail.<id>.<projects domain>`. `<projects domain>` is the domain this Workbench install keeps its projects under: it is the last part of the project's staging address in its README, so read it there and never assume one. A domain the project owns follows `cf_zone_attach` in step 6.1.
 
-1. `cf_email_sending_onboard domain=mail.<id>.mccaskielabs.app` creates the Email Sending subdomain in the projects account, adds the records Cloudflare expects (the `cf-bounce` MX and SPF, and DKIM) and the domain's own DMARC record (`p=reject; adkim=s; aspf=r`), records them, and checks each over DNS-over-HTTPS. A record in the way stops it; it changes nothing it didn't make.
+1. `cf_email_sending_onboard domain=mail.<id>.<projects domain>` creates the Email Sending subdomain in the projects account, adds the records Cloudflare expects (the `cf-bounce` MX and SPF, and DKIM) and the domain's own DMARC record (`p=reject; adkim=s; aspf=r`), records them, and checks each over DNS-over-HTTPS. A record in the way stops it; it changes nothing it didn't make.
 2. `cf_email_sending_status` says `ready` once every record is visible. Records can take a few minutes.
-3. `gw_sender_add address=hello@mail.<id>.mccaskielabs.app` allows the address. The Gateway accepts it within a minute.
+3. `gw_sender_add address=hello@mail.<id>.<projects domain>` allows the address. The Gateway accepts it within a minute.
 
 The DNS records are ordinary `dns_record` rows for the project, so removing one is `cf_dns_delete` (two-step).

package/capabilities/email.json

@@ -52,7 +52,7 @@
       "title": "Send a transactional mail with an inline logo",
       "lang": "ts",
       "probe": "email.send.inline-attachment",
-      "code": "const env = workbenchEnv(process.env)\nconst mailer = createMailer({ env, transport: selectTransport(env), from: { address: 'hello@mail.example.com', name: 'Example' }, gateway: { key: process.env.WORKBENCH_GATEWAY_KEY! } })\nawait mailer.send({ to: user.email, subject: 'Welcome', text, html: '<img src=\"cid:logo\"> ...', template: 'welcome', idempotencyKey: `welcome:${user.id}`, attachments: [{ filename: 'logo.png', mimeType: 'image/png', bytes: logo, contentId: 'logo' }] })"
+      "code": "const env = workbenchEnv(process.env)\nconst mailer = createMailer({ env, transport: selectTransport(env), from: { address: 'hello@mail.example.com', name: 'Example' }, gateway: { key: process.env.WORKBENCH_GATEWAY_KEY!, url: process.env.WORKBENCH_GATEWAY_URL! } })\nawait mailer.send({ to: user.email, subject: 'Welcome', text, html: '<img src=\"cid:logo\"> ...', template: 'welcome', idempotencyKey: `welcome:${user.id}`, attachments: [{ filename: 'logo.png', mimeType: 'image/png', bytes: logo, contentId: 'logo' }] })"
     }
   ],
   "probes": [

package/capabilities/gateway.json

@@ -6,8 +6,7 @@
   "summary": "What every Gateway endpoint shares: project keys by environment and scope, the request and response headers, the monthly budget check and the error codes. Apps hold one Workbench key and never a vendor key.",
   "status": "built",
   "surfaces": {
-    "gateway": ["GET /v1/health", "GET /v1/usage", "GET /v1/capabilities", "GET /v1/calls"],
-    "package": ["DEFAULT_GATEWAY_URL"]
+    "gateway": ["GET /v1/health", "GET /v1/usage", "GET /v1/capabilities", "GET /v1/calls"]
   },
   "config": [
     {
@@ -19,11 +18,10 @@
     },
     {
       "name": "WORKBENCH_GATEWAY_URL",
-      "required": false,
+      "required": true,
       "secret": false,
-      "default": "https://gateway.mccaskielabs.dev",
       "environments": ["development", "staging", "production"],
-      "description": "Gateway base URL. Leave unset outside tests"
+      "description": "The address of this Workbench install's Gateway. Control writes it into wrangler.jsonc when it creates the project; there is no built-in address"
     }
   ],
   "allowed": {

package/capabilities/image-search.json

@@ -120,7 +120,7 @@
       "title": "Search for images",
       "lang": "ts",
       "probe": "image-search.serper",
-      "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst results = await ai.images.search({ q: 'Mayon volcano', job: 'editor.image-search', num: 10 })"
+      "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env), url: env.WORKBENCH_GATEWAY_URL })\nconst results = await ai.images.search({ q: 'Mayon volcano', job: 'editor.image-search', num: 10 })"
     }
   ],
   "probes": [

package/capabilities/images.json

@@ -166,7 +166,7 @@
       "title": "Generate one image",
       "lang": "ts",
       "probe": "images.generate.image-default",
-      "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst img = await ai.images.generate({ prompt, aspectRatio: '3:2', job: 'article.hero' })\nawait env.IMAGES.put(key, img.bytes, { httpMetadata: { contentType: img.mimeType }, customMetadata: { model: img.model, requestId: img.requestId } })"
+      "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env), url: env.WORKBENCH_GATEWAY_URL })\nconst img = await ai.images.generate({ prompt, aspectRatio: '3:2', job: 'article.hero' })\nawait env.IMAGES.put(key, img.bytes, { httpMetadata: { contentType: img.mimeType }, customMetadata: { model: img.model, requestId: img.requestId } })"
     },
     {
       "id": "images.example.reference",

package/dist/capabilities.gen.d.ts

@@ -1,4 +1,4 @@
-export declare const MANIFEST_VERSION: "90023fb27145";
+export declare const MANIFEST_VERSION: "5f4a5d2dad37";
 export declare const capabilities: {
     readonly ai: {
         readonly $schema: "./schema.json";
@@ -119,7 +119,7 @@ export declare const capabilities: {
             readonly id: "ai.example.text";
             readonly title: "One-shot text";
             readonly lang: "ts";
-            readonly code: "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst r = await ai.text({ model: 'claude-default', job: 'article.write', prompt })\nawait save({ text: r.text, model: r.model, requestId: r.requestId })";
+            readonly code: "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env), url: env.WORKBENCH_GATEWAY_URL })\nconst r = await ai.text({ model: 'claude-default', job: 'article.write', prompt })\nawait save({ text: r.text, model: r.model, requestId: r.requestId })";
             readonly probe: "ai.text.claude-default";
         }, {
             readonly id: "ai.example.voice";
@@ -816,7 +816,7 @@ export declare const capabilities: {
             readonly id: "email.example.send";
             readonly title: "Send a transactional mail with an inline logo";
             readonly lang: "ts";
-            readonly code: "const env = workbenchEnv(process.env)\nconst mailer = createMailer({ env, transport: selectTransport(env), from: { address: 'hello@mail.example.com', name: 'Example' }, gateway: { key: process.env.WORKBENCH_GATEWAY_KEY! } })\nawait mailer.send({ to: user.email, subject: 'Welcome', text, html: '<img src=\"cid:logo\"> ...', template: 'welcome', idempotencyKey: `welcome:${user.id}`, attachments: [{ filename: 'logo.png', mimeType: 'image/png', bytes: logo, contentId: 'logo' }] })";
+            readonly code: "const env = workbenchEnv(process.env)\nconst mailer = createMailer({ env, transport: selectTransport(env), from: { address: 'hello@mail.example.com', name: 'Example' }, gateway: { key: process.env.WORKBENCH_GATEWAY_KEY!, url: process.env.WORKBENCH_GATEWAY_URL! } })\nawait mailer.send({ to: user.email, subject: 'Welcome', text, html: '<img src=\"cid:logo\"> ...', template: 'welcome', idempotencyKey: `welcome:${user.id}`, attachments: [{ filename: 'logo.png', mimeType: 'image/png', bytes: logo, contentId: 'logo' }] })";
             readonly probe: "email.send.inline-attachment";
         }];
         readonly probes: readonly [{
@@ -985,7 +985,7 @@ export declare const capabilities: {
             readonly id: "email-inbound.example.handler";
             readonly title: "Store inbound mail";
             readonly lang: "ts";
-            readonly code: "export async function handleEmail(mail, env, ctx, { reject }) {\n  if (!mail.to.some((t) => t.address === 'inbox@wb-probe-staging.mccaskielabs.app')) return reject('Unknown mailbox')\n  await saveMail(env, { message_id: mail.message_id, subject: mail.subject, text: mail.text, received_at: mail.received_at })\n}";
+            readonly code: "export async function handleEmail(mail, env, ctx, { reject }) {\n  if (!mail.to.some((t) => t.address === 'inbox@<id>-staging.<projects domain>')) return reject('Unknown mailbox')\n  await saveMail(env, { message_id: mail.message_id, subject: mail.subject, text: mail.text, received_at: mail.received_at })\n}";
             readonly probe: "email-inbound.roundtrip";
         }];
         readonly probes: readonly [{
@@ -1070,7 +1070,7 @@ export declare const capabilities: {
         readonly rules: readonly [{
             readonly id: "email-sending.namespace-only";
             readonly kind: "must";
-            readonly text: "Onboard a domain in the project's own namespace, for example mail.<id>.mccaskielabs.app. Project-owned zones such as wbprobe.com follow cf_zone_attach (step 6.1).";
+            readonly text: "Onboard a domain in the project's own namespace, for example mail.<id>.<projects domain> (the domain this install keeps its projects under). A domain the project owns follows cf_zone_attach (step 6.1).";
             readonly enforced_by: "control";
             readonly probe: "email-sending.onboard";
         }, {
@@ -1097,7 +1097,7 @@ export declare const capabilities: {
             readonly half: "drill";
             readonly expect: "pass";
             readonly cost_hint_usd: 0;
-            readonly note: "cf_email_sending_onboard on mail.<id>.mccaskielabs.app; a second call changes nothing";
+            readonly note: "cf_email_sending_onboard on mail.<id>.<projects domain>; a second call changes nothing";
         }, {
             readonly id: "email-sending.status";
             readonly half: "drill";
@@ -1366,7 +1366,6 @@ export declare const capabilities: {
         readonly status: "built";
         readonly surfaces: {
             readonly gateway: readonly ["GET /v1/health", "GET /v1/usage", "GET /v1/capabilities", "GET /v1/calls"];
-            readonly package: readonly ["DEFAULT_GATEWAY_URL"];
         };
         readonly config: readonly [{
             readonly name: "WORKBENCH_GATEWAY_KEY";
@@ -1376,11 +1375,10 @@ export declare const capabilities: {
             readonly description: "The project's Gateway key for this environment, delivered as a Worker secret by gw_key_issue. Never in code, .dev.vars.example or logs";
         }, {
             readonly name: "WORKBENCH_GATEWAY_URL";
-            readonly required: false;
+            readonly required: true;
             readonly secret: false;
-            readonly default: "https://gateway.mccaskielabs.dev";
             readonly environments: readonly ["development", "staging", "production"];
-            readonly description: "Gateway base URL. Leave unset outside tests";
+            readonly description: "The address of this Workbench install's Gateway. Control writes it into wrangler.jsonc when it creates the project; there is no built-in address";
         }];
         readonly allowed: {
             readonly scopes: readonly ["ai", "images", "search", "email"];
@@ -1679,7 +1677,7 @@ export declare const capabilities: {
             readonly id: "image-search.example.search";
             readonly title: "Search for images";
             readonly lang: "ts";
-            readonly code: "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst results = await ai.images.search({ q: 'Mayon volcano', job: 'editor.image-search', num: 10 })";
+            readonly code: "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env), url: env.WORKBENCH_GATEWAY_URL })\nconst results = await ai.images.search({ q: 'Mayon volcano', job: 'editor.image-search', num: 10 })";
             readonly probe: "image-search.serper";
         }];
         readonly probes: readonly [{
@@ -1809,7 +1807,7 @@ export declare const capabilities: {
             readonly id: "images.example.generate";
             readonly title: "Generate one image";
             readonly lang: "ts";
-            readonly code: "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst img = await ai.images.generate({ prompt, aspectRatio: '3:2', job: 'article.hero' })\nawait env.IMAGES.put(key, img.bytes, { httpMetadata: { contentType: img.mimeType }, customMetadata: { model: img.model, requestId: img.requestId } })";
+            readonly code: "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env), url: env.WORKBENCH_GATEWAY_URL })\nconst img = await ai.images.generate({ prompt, aspectRatio: '3:2', job: 'article.hero' })\nawait env.IMAGES.put(key, img.bytes, { httpMetadata: { contentType: img.mimeType }, customMetadata: { model: img.model, requestId: img.requestId } })";
             readonly probe: "images.generate.image-default";
         }, {
             readonly id: "images.example.reference";

package/dist/capabilities.gen.js

@@ -1,6 +1,6 @@
 // Generated by `npm run capabilities:build` from capabilities/*.json. Do not edit.
 // check:capabilities fails in Checks when this file is stale.
-export const MANIFEST_VERSION = "90023fb27145";
+export const MANIFEST_VERSION = "5f4a5d2dad37";
 export const capabilities = {
     "ai": {
         "$schema": "./schema.json",
@@ -204,7 +204,7 @@ export const capabilities = {
                 "id": "ai.example.text",
                 "title": "One-shot text",
                 "lang": "ts",
-                "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst r = await ai.text({ model: 'claude-default', job: 'article.write', prompt })\nawait save({ text: r.text, model: r.model, requestId: r.requestId })",
+                "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env), url: env.WORKBENCH_GATEWAY_URL })\nconst r = await ai.text({ model: 'claude-default', job: 'article.write', prompt })\nawait save({ text: r.text, model: r.model, requestId: r.requestId })",
                 "probe": "ai.text.claude-default"
             },
             {
@@ -1139,7 +1139,7 @@ export const capabilities = {
                 "id": "email.example.send",
                 "title": "Send a transactional mail with an inline logo",
                 "lang": "ts",
-                "code": "const env = workbenchEnv(process.env)\nconst mailer = createMailer({ env, transport: selectTransport(env), from: { address: 'hello@mail.example.com', name: 'Example' }, gateway: { key: process.env.WORKBENCH_GATEWAY_KEY! } })\nawait mailer.send({ to: user.email, subject: 'Welcome', text, html: '<img src=\"cid:logo\"> ...', template: 'welcome', idempotencyKey: `welcome:${user.id}`, attachments: [{ filename: 'logo.png', mimeType: 'image/png', bytes: logo, contentId: 'logo' }] })",
+                "code": "const env = workbenchEnv(process.env)\nconst mailer = createMailer({ env, transport: selectTransport(env), from: { address: 'hello@mail.example.com', name: 'Example' }, gateway: { key: process.env.WORKBENCH_GATEWAY_KEY!, url: process.env.WORKBENCH_GATEWAY_URL! } })\nawait mailer.send({ to: user.email, subject: 'Welcome', text, html: '<img src=\"cid:logo\"> ...', template: 'welcome', idempotencyKey: `welcome:${user.id}`, attachments: [{ filename: 'logo.png', mimeType: 'image/png', bytes: logo, contentId: 'logo' }] })",
                 "probe": "email.send.inline-attachment"
             }
         ],
@@ -1344,7 +1344,7 @@ export const capabilities = {
                 "id": "email-inbound.example.handler",
                 "title": "Store inbound mail",
                 "lang": "ts",
-                "code": "export async function handleEmail(mail, env, ctx, { reject }) {\n  if (!mail.to.some((t) => t.address === 'inbox@wb-probe-staging.mccaskielabs.app')) return reject('Unknown mailbox')\n  await saveMail(env, { message_id: mail.message_id, subject: mail.subject, text: mail.text, received_at: mail.received_at })\n}",
+                "code": "export async function handleEmail(mail, env, ctx, { reject }) {\n  if (!mail.to.some((t) => t.address === 'inbox@<id>-staging.<projects domain>')) return reject('Unknown mailbox')\n  await saveMail(env, { message_id: mail.message_id, subject: mail.subject, text: mail.text, received_at: mail.received_at })\n}",
                 "probe": "email-inbound.roundtrip"
             }
         ],
@@ -1452,7 +1452,7 @@ export const capabilities = {
             {
                 "id": "email-sending.namespace-only",
                 "kind": "must",
-                "text": "Onboard a domain in the project's own namespace, for example mail.<id>.mccaskielabs.app. Project-owned zones such as wbprobe.com follow cf_zone_attach (step 6.1).",
+                "text": "Onboard a domain in the project's own namespace, for example mail.<id>.<projects domain> (the domain this install keeps its projects under). A domain the project owns follows cf_zone_attach (step 6.1).",
                 "enforced_by": "control",
                 "probe": "email-sending.onboard"
             },
@@ -1484,7 +1484,7 @@ export const capabilities = {
                 "half": "drill",
                 "expect": "pass",
                 "cost_hint_usd": 0,
-                "note": "cf_email_sending_onboard on mail.<id>.mccaskielabs.app; a second call changes nothing"
+                "note": "cf_email_sending_onboard on mail.<id>.<projects domain>; a second call changes nothing"
             },
             {
                 "id": "email-sending.status",
@@ -1861,9 +1861,6 @@ export const capabilities = {
                 "GET /v1/usage",
                 "GET /v1/capabilities",
                 "GET /v1/calls"
-            ],
-            "package": [
-                "DEFAULT_GATEWAY_URL"
             ]
         },
         "config": [
@@ -1879,15 +1876,14 @@ export const capabilities = {
             },
             {
                 "name": "WORKBENCH_GATEWAY_URL",
-                "required": false,
+                "required": true,
                 "secret": false,
-                "default": "https://gateway.mccaskielabs.dev",
                 "environments": [
                     "development",
                     "staging",
                     "production"
                 ],
-                "description": "Gateway base URL. Leave unset outside tests"
+                "description": "The address of this Workbench install's Gateway. Control writes it into wrangler.jsonc when it creates the project; there is no built-in address"
             }
         ],
         "allowed": {
@@ -2278,7 +2274,7 @@ export const capabilities = {
                 "id": "image-search.example.search",
                 "title": "Search for images",
                 "lang": "ts",
-                "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst results = await ai.images.search({ q: 'Mayon volcano', job: 'editor.image-search', num: 10 })",
+                "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env), url: env.WORKBENCH_GATEWAY_URL })\nconst results = await ai.images.search({ q: 'Mayon volcano', job: 'editor.image-search', num: 10 })",
                 "probe": "image-search.serper"
             }
         ],
@@ -2459,7 +2455,7 @@ export const capabilities = {
                 "id": "images.example.generate",
                 "title": "Generate one image",
                 "lang": "ts",
-                "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst img = await ai.images.generate({ prompt, aspectRatio: '3:2', job: 'article.hero' })\nawait env.IMAGES.put(key, img.bytes, { httpMetadata: { contentType: img.mimeType }, customMetadata: { model: img.model, requestId: img.requestId } })",
+                "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env), url: env.WORKBENCH_GATEWAY_URL })\nconst img = await ai.images.generate({ prompt, aspectRatio: '3:2', job: 'article.hero' })\nawait env.IMAGES.put(key, img.bytes, { httpMetadata: { contentType: img.mimeType }, customMetadata: { model: img.model, requestId: img.requestId } })",
                 "probe": "images.generate.image-default"
             },
             {

package/dist/env.d.ts

@@ -1,6 +1,5 @@
 export declare const WORKBENCH_ENVS: readonly ["development", "staging", "production"];
 export type WorkbenchEnv = (typeof WORKBENCH_ENVS)[number];
-export declare const DEFAULT_GATEWAY_URL = "https://gateway.mccaskielabs.dev";
 /**
  * Reads `WORKBENCH_ENV`. Throws if it is missing or not one of the three
  * environments. Never falls back to `NODE_ENV` or a default (audit F9, F18).

package/dist/env.js

@@ -1,6 +1,5 @@
 import { invalid, missing } from "./errors.js";
 export const WORKBENCH_ENVS = ["development", "staging", "production"];
-export const DEFAULT_GATEWAY_URL = "https://gateway.mccaskielabs.dev";
 /**
  * Reads `WORKBENCH_ENV`. Throws if it is missing or not one of the three
  * environments. Never falls back to `NODE_ENV` or a default (audit F9, F18).

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { WORKBENCH_ENVS, DEFAULT_GATEWAY_URL, workbenchEnv, type WorkbenchEnv } from "./env.ts";
+export { WORKBENCH_ENVS, workbenchEnv, type WorkbenchEnv } from "./env.ts";
 export { defineConfig, type Config } from "./define-config.ts";
 export { sharedSecret, workerSecret, redact, redactAll, type SecretsStoreSecretLike } from "./secrets.ts";
 export { WorkbenchConfigError, type ConfigErrorCode, type ConfigProblem } from "./errors.ts";

package/dist/index.js

@@ -1,4 +1,4 @@
-export { WORKBENCH_ENVS, DEFAULT_GATEWAY_URL, workbenchEnv } from "./env.js";
+export { WORKBENCH_ENVS, workbenchEnv } from "./env.js";
 export { defineConfig } from "./define-config.js";
 export { sharedSecret, workerSecret, redact, redactAll } from "./secrets.js";
 export { WorkbenchConfigError } from "./errors.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mccaskie-labs/workbench-config",
-  "version": "0.1.40",
+  "version": "0.2.0",
   "description": "Workbench app configuration: WORKBENCH_ENV, typed variables that fail by name, secrets that are never printed, and the capabilities manifest.",
   "license": "UNLICENSED",
   "type": "module",