pool-anything 0.1.0

package/dist/cli.js

@@ -0,0 +1,199 @@
+#!/usr/bin/env node
+/**
+ * `pool-anything` — global CLI entrypoint.
+ *
+ * Parses a small set of flags, maps them onto the existing env config
+ * (PORT / HOST / LOCAL_DB_PATH / POOL_DATA_DIR), then boots the server.
+ * Env vars must be set *before* importing ./server.js because config is
+ * evaluated at module load.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { spawn } from "node:child_process";
+import { PACKAGE_ROOT } from "./config/paths.js";
+function readVersion() {
+    try {
+        const raw = fs.readFileSync(path.join(PACKAGE_ROOT, "package.json"), "utf8");
+        const pkg = JSON.parse(raw);
+        return typeof pkg.version === "string" ? pkg.version : "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+function helpText(version) {
+    return `pool-anything v${version} — gather free-tier API keys into one pool, rotate through them.
+
+Usage:
+  pool-anything                  Interactive assistant shell (default when stdin is a TTY)
+  pool-anything "<command>"      Run one assistant command, e.g. pool-anything "list pools"
+  pool-anything serve [options]  Start the web UI + API server
+  pool-anything [options]        Start the server (back-compat when flags are given)
+
+Assistant commands (also inside the shell): list pools, list providers,
+  list keys [for <pool>], show usage for <pool>, add [N] keys to <pool>,
+  create pool <name> for <provider>, delete pool <name>, watch <pool>,
+  next [for <pool>], consume <n> [on <pool>], serve, exit. Type '.help' in-shell.
+
+Options (server):
+  -p, --port <n>      Port for the web UI + API (default: 3000, or $PORT)
+  -H, --host <addr>   Interface to bind (default: 127.0.0.1, or $HOST)
+      --db <path>     SQLite file (default: ./data/*.db in a checkout,
+                      ~/.pool-anything/*.db when installed globally;
+                      or $LOCAL_DB_PATH)
+      --data-dir <d>  Data directory holding the SQLite file (or $POOL_DATA_DIR)
+      --open          Open the web UI in your browser on startup
+  -e, --exec <cmd>    Run one assistant command and exit
+      --serve         Start the server (same as 'pool-anything serve')
+  -h, --help          Show this help
+  -V, --version       Show version
+
+Examples:
+  pool-anything
+  pool-anything "list pools"
+  echo "gsk_abc" | pool-anything --exec "add keys to groq"
+  pool-anything serve --port 4000 --open
+  pool-anything --db ./my-pool.db
+  PORT=4000 pool-anything
+
+Open http://localhost:3000 once serving, search for a provider, and Gather keys.
+`;
+}
+function parseArgs(argv) {
+    const opts = { open: false, help: false, version: false, serve: false, command: [] };
+    let serverFlagSeen = false;
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "-h" || a === "--help")
+            opts.help = true;
+        else if (a === "-V" || a === "--version")
+            opts.version = true;
+        else if (a === "--open") {
+            opts.open = true;
+            serverFlagSeen = true;
+        }
+        else if (a === "--no-open")
+            opts.open = false;
+        else if (a === "--serve")
+            opts.serve = true;
+        else if (a === "-e" || a === "--exec")
+            opts.exec = argv[++i] ?? "";
+        else if (a.startsWith("--exec="))
+            opts.exec = a.slice("--exec=".length);
+        else if (a === "-p" || a === "--port") {
+            opts.port = argv[++i];
+            serverFlagSeen = true;
+        }
+        else if (a === "-H" || a === "--host") {
+            opts.host = argv[++i];
+            serverFlagSeen = true;
+        }
+        else if (a === "--db") {
+            opts.db = argv[++i];
+            serverFlagSeen = true;
+        }
+        else if (a === "--data-dir" || a === "--dataDir") {
+            opts.dataDir = argv[++i];
+            serverFlagSeen = true;
+        }
+        else if (a.startsWith("--port=")) {
+            opts.port = a.slice("--port=".length);
+            serverFlagSeen = true;
+        }
+        else if (a.startsWith("--host=")) {
+            opts.host = a.slice("--host=".length);
+            serverFlagSeen = true;
+        }
+        else if (a.startsWith("--db=")) {
+            opts.db = a.slice("--db=".length);
+            serverFlagSeen = true;
+        }
+        else if (a.startsWith("--data-dir=")) {
+            opts.dataDir = a.slice("--data-dir=".length);
+            serverFlagSeen = true;
+        }
+        else if (a.startsWith("-p") && a.length > 2) {
+            opts.port = a.slice(2);
+            serverFlagSeen = true;
+        }
+        else if ((a === "serve" || a === "server" || a === "start") && i === 0)
+            opts.serve = true;
+        else if (!a.startsWith("-"))
+            opts.command.push(a);
+        else {
+            console.error(`Unknown option: ${a}\n`);
+            console.error(helpText(readVersion()));
+            process.exit(1);
+        }
+    }
+    // Any explicit server flag implies server mode (back-compat with v0.1.0,
+    // where flags alone booted the server).
+    if (serverFlagSeen)
+        opts.serve = true;
+    return opts;
+}
+function openBrowser(url) {
+    const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
+    const args = process.platform === "win32" ? ["/c", "start", "", url] : process.platform === "darwin" ? [url] : [url];
+    try {
+        spawn(cmd, args, { detached: true, stdio: "ignore" }).unref();
+    }
+    catch (e) {
+        console.warn(`[warn] could not open browser: ${e.message}`);
+    }
+}
+const opts = parseArgs(process.argv.slice(2));
+const version = readVersion();
+if (opts.help) {
+    console.log(helpText(version));
+    process.exit(0);
+}
+if (opts.version) {
+    console.log(version);
+    process.exit(0);
+}
+if (opts.port !== undefined) {
+    if (!/^\d+$/.test(opts.port) || Number(opts.port) < 1 || Number(opts.port) > 65535) {
+        console.error(`Invalid --port: ${opts.port} (must be 1-65535)`);
+        process.exit(1);
+    }
+    process.env.PORT = opts.port;
+}
+if (opts.host !== undefined) {
+    if (!opts.host) {
+        console.error("Invalid --host: must be non-empty");
+        process.exit(1);
+    }
+    process.env.HOST = opts.host;
+}
+if (opts.db !== undefined) {
+    if (!opts.db) {
+        console.error("Invalid --db: must be a path");
+        process.exit(1);
+    }
+    process.env.LOCAL_DB_PATH = opts.db;
+}
+if (opts.dataDir !== undefined) {
+    if (!opts.dataDir) {
+        console.error("Invalid --data-dir: must be a path");
+        process.exit(1);
+    }
+    process.env.POOL_DATA_DIR = opts.dataDir;
+}
+if (opts.open) {
+    const host = process.env.HOST ?? "127.0.0.1";
+    const port = process.env.PORT ?? "3000";
+    const displayHost = host === "0.0.0.0" || host === "::" ? "localhost" : host;
+    setTimeout(() => openBrowser(`http://${displayHost}:${port}`), 800);
+}
+const oneShot = opts.exec ?? (opts.command.length > 0 ? opts.command.join(" ") : "");
+if (!opts.serve && oneShot) {
+    const { execOnce } = await import("./cli/repl.js");
+    process.exit(await execOnce(oneShot));
+}
+if (!opts.serve && process.stdin.isTTY && process.stdout.isTTY) {
+    const { startRepl } = await import("./cli/repl.js");
+    await startRepl(version);
+    process.exit(0);
+}
+await import("./server.js");

package/dist/common/http.js

@@ -0,0 +1,55 @@
+export function readJson(req, maxBytes = 1_000_000) {
+    return new Promise((resolve, reject) => {
+        let bytes = 0;
+        const chunks = [];
+        let settled = false;
+        const done = (fn) => {
+            if (settled)
+                return;
+            settled = true;
+            req.removeAllListeners("data");
+            req.removeAllListeners("end");
+            req.removeAllListeners("error");
+            req.removeAllListeners("close");
+            fn();
+        };
+        req.on("data", (c) => {
+            bytes += c.length;
+            if (bytes > maxBytes) {
+                req.destroy();
+                done(() => reject(new Error("too large")));
+                return;
+            }
+            chunks.push(c);
+        });
+        req.on("end", () => {
+            done(() => {
+                const s = Buffer.concat(chunks).toString("utf8");
+                if (!s)
+                    return resolve({});
+                try {
+                    resolve(JSON.parse(s));
+                }
+                catch {
+                    reject(new Error("bad json"));
+                }
+            });
+        });
+        req.on("error", (e) => done(() => reject(e)));
+        req.on("close", () => done(() => reject(new Error("connection closed"))));
+    });
+}
+export function send(res, code, body) {
+    if (res.headersSent)
+        return;
+    res.writeHead(code, {
+        "content-type": "application/json; charset=utf-8",
+        "cache-control": "no-store",
+        "x-content-type-options": "nosniff",
+    });
+    res.end(JSON.stringify(body));
+}
+/** Full HTML-escape for values interpolated into innerHTML (quotes alone are not enough). */
+export function esc(s) {
+    return String(s).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}

package/dist/config/env.js

@@ -0,0 +1,94 @@
+import { resolveDbPath } from "./paths.js";
+/** Port for the web UI + API (single server). */
+function parsePort() {
+    const n = Number(process.env.PORT ?? 3000);
+    if (!Number.isInteger(n) || n < 1 || n > 65535)
+        return 3000;
+    return n;
+}
+export const PORT = parsePort();
+/**
+ * Interface to bind. Defaults to loopback: the API serves raw keys with no
+ * auth, so it must not listen on all interfaces unless the operator opts in
+ * behind their own auth layer (reverse proxy, VPN, firewall).
+ */
+export const HOST = process.env.HOST ?? "127.0.0.1";
+/**
+ * SQLite file. Precedence: LOCAL_DB_PATH > POOL_DATA_DIR > checkout-local
+ * default (./data/pool-anything.db) or global default (~/.pool-anything/).
+ * Evaluated at import — tests set LOCAL_DB_PATH before importing.
+ */
+export const DB_PATH = resolveDbPath();
+/** Proxy upstream timeout in ms. Read live so tests/CLI can override per run. */
+export function proxyTimeoutMs() {
+    const n = Number(process.env.PROXY_TIMEOUT_MS ?? 30000);
+    if (!Number.isFinite(n) || n <= 0)
+        return 30000;
+    return Math.min(n, 60000);
+}
+/** Test/loopback escape hatch only: allows http + private hosts upstream. Never in prod. */
+export function allowPrivateUpstream() {
+    return process.env.ALLOW_PRIVATE_UPSTREAM === "1";
+}
+/** Optional bearer token protecting raw keys, writes, and proxy use. Read live so tests can override. */
+export function apiToken() {
+    return (process.env.POOL_API_TOKEN ?? "").trim();
+}
+export function authEnabled() {
+    return apiToken().length > 0;
+}
+/**
+ * Cross-origin callers permitted to read API responses in the browser.
+ * Default: the hosted Pages tools UI + local dev origins only — never `*`
+ * and never an reflected arbitrary Origin. Operators self-hosting the UI on
+ * another domain set ALLOWED_ORIGINS="https://ui.example.com,...".
+ */
+const DEFAULT_ORIGINS = [
+    "https://pool-anything-tools.pages.dev",
+    "https://pool-anything.pages.dev",
+];
+export function allowedOrigins() {
+    const raw = (process.env.ALLOWED_ORIGINS ?? "").trim();
+    if (!raw)
+        return [...DEFAULT_ORIGINS];
+    return raw
+        .split(",")
+        .map((s) => s.trim().replace(/\/+$/, ""))
+        .filter(Boolean);
+}
+/** True for the hosted UI, explicit allowlist entries, and http loopback dev. */
+export function isAllowedOrigin(origin) {
+    if (allowedOrigins().includes(origin))
+        return true;
+    try {
+        const u = new URL(origin);
+        const host = u.hostname.toLowerCase();
+        if (u.protocol !== "http:")
+            return false;
+        if (host === "localhost" || host === "127.0.0.1" || host === "::1")
+            return true;
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+/** Warn once at startup when running in an insecure configuration. */
+export function startupWarnings() {
+    const warnings = [];
+    if (allowPrivateUpstream()) {
+        warnings.push("ALLOW_PRIVATE_UPSTREAM=1 is set: SSRF protections are OFF. Test/loopback only — never with real keys or a public bind.");
+    }
+    if (HOST !== "127.0.0.1" && HOST !== "localhost" && HOST !== "::1") {
+        if (!authEnabled()) {
+            warnings.push(`HOST=${HOST} binds a non-loopback interface with no auth (POOL_API_TOKEN unset). Set POOL_API_TOKEN or put it behind your own auth layer.`);
+        }
+        else {
+            warnings.push(`HOST=${HOST} binds a non-loopback interface. Bearer auth is enabled — ensure POOL_API_TOKEN is strong and served over TLS/VPN.`);
+        }
+    }
+    if (authEnabled() && apiToken().length < 16) {
+        warnings.push("POOL_API_TOKEN is set but short (<16 chars). Use a long random token.");
+    }
+    return warnings;
+}

package/dist/config/paths.js

@@ -0,0 +1,112 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+/**
+ * Package-root-aware path resolution.
+ *
+ * Problem: several modules used `process.cwd()` to locate bundled assets
+ * (`data/providers.json`, `public/logos/*`, `src/logo.png`) and the default
+ * SQLite file. That works for `git clone + npm run dev` but breaks the
+ * moment the package is installed globally (`npm i -g`), because cwd is
+ * wherever the user runs `pool-anything` from — not the install directory.
+ *
+ * This module resolves everything relative to the installed package root
+ * (derived from `import.meta.url`), with a `process.cwd()` fallback so a
+ * source checkout keeps working unchanged.
+ */
+function findPackageRoot() {
+    // Walk up from this file (src/config/ or dist/config/) until package.json.
+    try {
+        let dir = path.dirname(fileURLToPath(import.meta.url));
+        for (let i = 0; i < 6; i++) {
+            if (fs.existsSync(path.join(dir, "package.json")))
+                return dir;
+            const parent = path.dirname(dir);
+            if (parent === dir)
+                break;
+            dir = parent;
+        }
+    }
+    catch {
+        // fall through to cwd
+    }
+    return process.cwd();
+}
+export const PACKAGE_ROOT = findPackageRoot();
+function firstExisting(...candidates) {
+    for (const c of candidates) {
+        try {
+            if (c && fs.existsSync(c))
+                return c;
+        }
+        catch {
+            // ignore
+        }
+    }
+    return null;
+}
+/** Installed `data/` dir (providers.json). Prefers the package, falls back to cwd checkout. */
+export function dataDir() {
+    const fromPkg = path.join(PACKAGE_ROOT, "data");
+    if (fs.existsSync(path.join(fromPkg, "providers.json")))
+        return fromPkg;
+    return path.join(process.cwd(), "data");
+}
+export function providersJsonPath() {
+    const hit = firstExisting(path.join(PACKAGE_ROOT, "data", "providers.json"), path.join(PACKAGE_ROOT, "dist", "data", "providers.json"), path.join(process.cwd(), "data", "providers.json"), path.join(process.cwd(), "dist", "data", "providers.json"));
+    return hit ?? path.join(PACKAGE_ROOT, "data", "providers.json");
+}
+/** Installed `public/` dir (provider logos + manifest). */
+export function publicDir() {
+    const candidates = [
+        path.join(PACKAGE_ROOT, "public"),
+        path.join(PACKAGE_ROOT, "dist", "public"),
+        path.join(process.cwd(), "public"),
+        path.join(process.cwd(), "dist", "public"),
+    ];
+    for (const c of candidates) {
+        try {
+            if (fs.existsSync(c))
+                return c;
+        }
+        catch {
+            // ignore
+        }
+    }
+    return path.join(PACKAGE_ROOT, "public");
+}
+export function logoPngPath() {
+    const hit = firstExisting(path.join(PACKAGE_ROOT, "dist", "logo.png"), path.join(PACKAGE_ROOT, "src", "logo.png"), path.join(process.cwd(), "dist", "logo.png"), path.join(process.cwd(), "src", "logo.png"));
+    return hit ?? path.join(PACKAGE_ROOT, "src", "logo.png");
+}
+export function logoManifestPath() {
+    const hit = firstExisting(path.join(PACKAGE_ROOT, "public", "logos", "manifest.json"), path.join(PACKAGE_ROOT, "dist", "public", "logos", "manifest.json"), path.join(process.cwd(), "public", "logos", "manifest.json"), path.join(process.cwd(), "dist", "public", "logos", "manifest.json"));
+    return hit ?? path.join(PACKAGE_ROOT, "public", "logos", "manifest.json");
+}
+function userDataDir() {
+    return path.join(os.homedir(), ".pool-anything");
+}
+function isSourceCheckout() {
+    return fs.existsSync(path.join(process.cwd(), "data", "providers.json"));
+}
+/**
+ * Default SQLite location (lowest precedence — LOCAL_DB_PATH / --db wins).
+ * - Source checkout (`cwd/data/providers.json` exists): `./data/pool-anything.db` (unchanged).
+ * - Global install: `~/.pool-anything/pool-anything.db` so the db is
+ *   writable no matter where the user runs the command from, and survives upgrades.
+ */
+export function defaultDbPath() {
+    const override = process.env.POOL_DATA_DIR?.trim();
+    if (override)
+        return path.join(override, "pool-anything.db");
+    if (isSourceCheckout())
+        return path.join(process.cwd(), "data", "pool-anything.db");
+    return path.join(userDataDir(), "pool-anything.db");
+}
+export function resolveDbPath() {
+    const explicit = process.env.LOCAL_DB_PATH?.trim();
+    if (explicit)
+        return explicit;
+    return defaultDbPath();
+}

package/dist/data/providers.json

@@ -0,0 +1,38 @@
+[
+  {"id":"groq","name":"Groq","baseUrl":"https://api.groq.com/openai/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"30 req/min, 14.4k req/day free (Llama 3.3 70B)","docsUrl":"https://console.groq.com/docs/openai","keyFields":["api_key"],"hint":"console.groq.com/keys, gsk_…","logo":"public/logos/groq.svg"},
+  {"id":"openrouter","name":"OpenRouter","baseUrl":"https://openrouter.ai/api/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":":free models $0, unfunded ~20 RPM / 200 RPD","docsUrl":"https://openrouter.ai/docs/api-reference/overview","keyFields":["api_key"],"hint":"openrouter.ai/keys, sk-or-v1-…","logo":"public/logos/openrouter.svg"},
+  {"id":"gemini","name":"Google Gemini","baseUrl":"https://generativelanguage.googleapis.com/v1beta","keyHeader":"x-goog-api-key","keyPrefix":"","extraHeaders":{},"quota":"15 RPM / 1500 RPD free (Flash)","docsUrl":"https://ai.google.dev/gemini-api/docs/api-key","keyFields":["api_key"],"hint":"aistudio.google.com/apikey","logo":"public/logos/gemini.svg"},
+  {"id":"mistral","name":"Mistral AI","baseUrl":"https://api.mistral.ai/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"trial credits, then PAYG","docsUrl":"https://docs.mistral.ai/api/","keyFields":["api_key"],"hint":"console.mistral.ai/api-keys","logo":"public/logos/mistral.svg"},
+  {"id":"cohere","name":"Cohere","baseUrl":"https://api.cohere.ai/compatibility/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"trial key, rate-limited","docsUrl":"https://docs.cohere.com/docs/compatibility-api","keyFields":["api_key"],"hint":"dashboard.cohere.com/api-keys","logo":"public/logos/cohere.svg"},
+  {"id":"fireworks","name":"Fireworks AI","baseUrl":"https://api.fireworks.ai/inference/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"$1 credit on signup","docsUrl":"https://fireworks.ai/docs/getting-started/introduction","keyFields":["api_key"],"hint":"fireworks.ai/api-keys, fw_…","logo":"public/logos/fireworks.svg"},
+  {"id":"huggingface","name":"Hugging Face","baseUrl":"https://router.huggingface.co/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"serverless free w/ login, hourly limits","docsUrl":"https://huggingface.co/docs/api-inference","keyFields":["api_key"],"hint":"huggingface.co/settings/tokens, hf_…","logo":"public/logos/huggingface.svg"},
+  {"id":"together","name":"Together AI","baseUrl":"https://api.together.ai/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"$1 credit, no permanent free","docsUrl":"https://docs.together.ai/docs/openai-api-compatibility","keyFields":["api_key"],"hint":"api.together.ai/settings/api-keys","logo":"public/logos/together.svg"},
+  {"id":"replicate","name":"Replicate","baseUrl":"https://api.replicate.com/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"trial ~$5, then per-second GPU","docsUrl":"https://replicate.com/docs/reference/http","keyFields":["api_key"],"hint":"replicate.com/account/api-tokens, r8_…","logo":"public/logos/replicate.svg"},
+  {"id":"openai","name":"OpenAI","baseUrl":"https://api.openai.com/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"PAYG, $5 min prepay","docsUrl":"https://platform.openai.com/docs/api-reference","keyFields":["api_key"],"hint":"platform.openai.com/api-keys, sk-…","logo":"public/logos/openai.svg"},
+  {"id":"anthropic","name":"Anthropic Claude","baseUrl":"https://api.anthropic.com/v1","keyHeader":"x-api-key","keyPrefix":"","extraHeaders":{"anthropic-version":"2023-06-01"},"quota":"$5 credit new accounts","docsUrl":"https://docs.anthropic.com/en/api/versioning","keyFields":["api_key"],"hint":"console.anthropic.com/settings/keys, sk-ant-…","logo":"public/logos/claude.svg"},
+  {"id":"perplexity","name":"Perplexity","baseUrl":"https://api.perplexity.ai","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"$5 credit on signup","docsUrl":"https://docs.perplexity.ai/getting-started/quickstart","keyFields":["api_key"],"hint":"perplexity.ai/settings/api, pplx-…","logo":"public/logos/perplexity.svg"},
+  {"id":"anyscale","name":"Anyscale Endpoints","baseUrl":"https://api.endpoints.anyscale.com/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"legacy, deprecated","docsUrl":"https://docs.anyscale.com/endpoints/overview","keyFields":["api_key"],"hint":"app.endpoints.anyscale.com/credentials","logo":"public/logos/anyscale.svg"},
+  {"id":"elevenlabs","name":"ElevenLabs","baseUrl":"https://api.elevenlabs.io/v1","keyHeader":"xi-api-key","keyPrefix":"","extraHeaders":{},"quota":"10k credits/mo free","docsUrl":"https://elevenlabs.io/docs","keyFields":["api_key"],"hint":"elevenlabs.io API key","logo":"public/logos/elevenlabs.svg"},
+  {"id":"deepgram","name":"Deepgram","baseUrl":"https://api.deepgram.com/v1","keyHeader":"Authorization","keyPrefix":"Token ","extraHeaders":{},"quota":"$200 credit on signup","docsUrl":"https://developers.deepgram.com/docs","keyFields":["api_key"],"hint":"Authorization: Token …","logo":"public/logos/deepgram.svg"},
+  {"id":"cartesia","name":"Cartesia","baseUrl":"https://api.cartesia.ai","keyHeader":"X-API-Key","keyPrefix":"","extraHeaders":{"Cartesia-Version":"2024-06-10"},"quota":"20,000 free tokens","docsUrl":"https://docs.cartesia.ai","keyFields":["api_key"],"hint":"Paste a Cartesia API key","logo":"public/logos/cartesia.svg"},
+  {"id":"tavily","name":"Tavily","baseUrl":"https://api.tavily.com","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"1,000 credits/mo free","docsUrl":"https://docs.tavily.com/documentation/api-reference/endpoint/search","keyFields":["api_key"],"hint":"app.tavily.com/home, tvly-…","logo":"public/logos/tavily.svg"},
+  {"id":"brave-search","name":"Brave Search","baseUrl":"https://api.search.brave.com/res/v1","keyHeader":"X-Subscription-Token","keyPrefix":"","extraHeaders":{},"quota":"2,000 queries/mo free","docsUrl":"https://brave.com/search/api/","keyFields":["api_key"],"hint":"brave.com/search/api/","logo":"public/logos/brave.svg"},
+  {"id":"serper","name":"Serper","baseUrl":"https://google.serper.dev","keyHeader":"X-API-KEY","keyPrefix":"","extraHeaders":{},"quota":"2,500 queries one-time","docsUrl":"https://serper.dev/docs","keyFields":["api_key"],"hint":"serper.dev API key","logo":"public/logos/serper.png"},
+  {"id":"scrapingbee","name":"ScrapingBee","baseUrl":"https://app.scrapingbee.com/api/v1","keyHeader":"query:api_key","keyPrefix":"","extraHeaders":{},"quota":"1,000 free credits","docsUrl":"https://www.scrapingbee.com/documentation","keyFields":["api_key"],"hint":"?api_key= query param","logo":"public/logos/scrapingbee.svg"},
+  {"id":"resend","name":"Resend","baseUrl":"https://api.resend.com","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"3,000/mo, 100/day free","docsUrl":"https://resend.com/docs/api-reference/introduction","keyFields":["api_key"],"hint":"resend.com/api-keys, re_…","logo":"public/logos/resend.svg"},
+  {"id":"sendgrid","name":"SendGrid","baseUrl":"https://api.sendgrid.com/v3","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"100/day free (60-day trial)","docsUrl":"https://docs.sendgrid.com/api-reference/","keyFields":["api_key"],"hint":"SG.… Bearer","logo":"public/logos/sendgrid.svg"},
+  {"id":"mailgun","name":"Mailgun","baseUrl":"https://api.mailgun.net/v3","keyHeader":"Authorization","keyPrefix":"Basic ","extraHeaders":{},"quota":"5k/3mo trial","docsUrl":"https://documentation.mailgun.com/docs/mailgun/api-reference/","keyFields":["api_key"],"hint":"Basic api:KEY, key-…","logo":"public/logos/mailgun.svg"},
+  {"id":"postmark","name":"Postmark","baseUrl":"https://api.postmarkapp.com","keyHeader":"X-Postmark-Server-Token","keyPrefix":"","extraHeaders":{},"quota":"100/mo trial","docsUrl":"https://postmarkapp.com/developer/api/overview","keyFields":["api_key"],"hint":"Server Token per server","logo":"public/logos/postmark.svg"},
+  {"id":"twilio","name":"Twilio SMS","baseUrl":"https://api.twilio.com/2010-04-01","keyHeader":"Authorization","keyPrefix":"Basic ","extraHeaders":{},"quota":"$15 credit trial","docsUrl":"https://www.twilio.com/docs/usage/api","keyFields":["accountSid","authToken"],"hint":"AC… SID + AuthToken, Basic base64(SID:Token)","logo":"public/logos/twilio.svg"},
+  {"id":"finnhub","name":"Finnhub","baseUrl":"https://finnhub.io/api/v1","keyHeader":"X-Finnhub-Token","keyPrefix":"","extraHeaders":{},"quota":"60/min free","docsUrl":"https://finnhub.io/docs/api","keyFields":["api_key"],"hint":"X-Finnhub-Token or ?token=","logo":"public/logos/finnhub.png"},
+  {"id":"mapbox","name":"Mapbox","baseUrl":"https://api.mapbox.com","keyHeader":"query:access_token","keyPrefix":"","extraHeaders":{},"quota":"100k geocode/mo, 50k loads/mo","docsUrl":"https://docs.mapbox.com/api/overview","keyFields":["api_key"],"hint":"?access_token=pk.…","logo":"public/logos/mapbox.svg"},
+  {"id":"googlemaps","name":"Google Maps","baseUrl":"https://maps.googleapis.com/maps/api","keyHeader":"query:key","keyPrefix":"","extraHeaders":{},"quota":"~10k/SKU/mo under $200 credit","docsUrl":"https://developers.google.com/maps/get-started","keyFields":["api_key"],"hint":"?key=AIza…","logo":"public/logos/googlemaps.svg"},
+  {"id":"openweather","name":"OpenWeather","baseUrl":"https://api.openweathermap.org/data/2.5","keyHeader":"query:appid","keyPrefix":"","extraHeaders":{},"quota":"1,000/day, 60/min free","docsUrl":"https://openweathermap.org/current","keyFields":["api_key"],"hint":"?appid=…","logo":"public/logos/openweather.png"},
+  {"id":"supabase","name":"Supabase","baseUrl":"https://<ref>.supabase.co/rest/v1","keyHeader":"apikey","keyPrefix":"","extraHeaders":{"Authorization":"Bearer <anonKey>"},"quota":"500MB DB, 5GB egress, 50k MAU","docsUrl":"https://supabase.com/docs/reference/api/start","keyFields":["url","anonKey"],"hint":"per-project URL + anon key","logo":"public/logos/supabase.svg","poolable":"conditional"},
+  {"id":"neon","name":"Neon Postgres","baseUrl":"https://console.neon.tech/api/v2","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"0.5GB, 100 CU-hrs/mo","docsUrl":"https://neon.com/docs/reference/api","keyFields":["api_key"],"hint":"control-plane only; data = conn string","logo":"public/logos/neon.svg","poolable":false},
+  {"id":"upstash","name":"Upstash Redis","baseUrl":"https://api.upstash.com/v2","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"500k cmds/mo free","docsUrl":"https://upstash.com/docs/devops/developer-api/introduction","keyFields":["api_key"],"hint":"per-db restUrl+token for data","logo":"public/logos/upstash.svg","poolable":true},
+  {"id":"turso","name":"Turso","baseUrl":"https://api.turso.tech/v1","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"5-9GB, 500M reads/mo","docsUrl":"https://docs.turso.tech/api-reference/introduction","keyFields":["orgSlug","platformToken"],"hint":"per-db URL + JWT for data","logo":"public/logos/turso.svg","poolable":true},
+  {"id":"appwrite","name":"Appwrite","baseUrl":"https://cloud.appwrite.io/v1","keyHeader":"X-Appwrite-Key","keyPrefix":"","extraHeaders":{"X-Appwrite-Project":"<PROJECT_ID>"},"quota":"75k MAU, 2 projects free","docsUrl":"https://appwrite.io/docs/apis/rest","keyFields":["endpoint","projectId","apiKey"],"hint":"endpoint+project+key","logo":"public/logos/appwrite.svg","poolable":"conditional"},
+  {"id":"cloudflare","name":"Cloudflare","baseUrl":"https://api.cloudflare.com/client/v4","keyHeader":"Authorization","keyPrefix":"Bearer ","extraHeaders":{},"quota":"100k req/day Workers, R2 10GB","docsUrl":"https://developers.cloudflare.com/api/","keyFields":["apiToken"],"hint":"account/zone-scoped, not poolable for data","logo":"public/logos/cloudflare.svg","poolable":false},
+  {"id":"custom","name":"Custom","baseUrl":"","keyHeader":"X-API-Key","keyPrefix":"","extraHeaders":{},"quota":"bring your own","docsUrl":"","keyFields":["api_key"],"hint":"Anything we don't provide: name it, add keys + info.","logo":""}
+]

package/dist/db/index.js

@@ -0,0 +1,20 @@
+import { sdb } from "../pool/index.js";
+export { DB_PATH } from "../pool/index.js";
+// Secondary demo table (exercises the D1 path behind /api/db/ping).
+// Uses the shared pool connection: one file, one handle.
+sdb.exec(`
+  CREATE TABLE IF NOT EXISTS items (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name TEXT NOT NULL,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+`);
+export function dbPing() {
+    try {
+        sdb.prepare("SELECT COUNT(*) AS n FROM items").get();
+        return { ok: true };
+    }
+    catch {
+        return { ok: false };
+    }
+}

package/dist/db/init.js

@@ -0,0 +1,11 @@
+import { sdb } from "../pool/index.js";
+import { DB_PATH, dbPing } from "./index.js";
+const seed = process.argv.includes("--seed");
+if (seed) {
+    const existing = sdb.prepare("SELECT COUNT(*) AS n FROM items WHERE name = ?").get("hello-local-d1");
+    if (existing.n === 0) {
+        sdb.prepare("INSERT INTO items (name) VALUES (?)").run("hello-local-d1");
+    }
+}
+dbPing();
+console.log(`local db ready at ${DB_PATH}`);