wirl 0.2.3 → 0.2.5

package/bin.js

@@ -486,6 +486,27 @@ var init_broker_token = __esm({
   }
 });
 
+// packages/core/src/broker-status.ts
+function restoreStatus(response) {
+  const carried = response.headers.get(CARRIED_STATUS_HEADER);
+  if (carried === null) return response;
+  const headers = new Headers(response.headers);
+  headers.delete(CARRIED_STATUS_HEADER);
+  const named = Number(carried);
+  const status = response.status === CARRIER && CARRIED.has(named) ? named : response.status;
+  return new Response(response.body, { status, statusText: status === response.status ? response.statusText : STATUS_TEXT[status] ?? "", headers });
+}
+var CARRIED_STATUS_HEADER, CARRIED, CARRIER, STATUS_TEXT;
+var init_broker_status = __esm({
+  "packages/core/src/broker-status.ts"() {
+    "use strict";
+    CARRIED_STATUS_HEADER = "x-wirl-status";
+    CARRIED = /* @__PURE__ */ new Set([502, 504]);
+    CARRIER = 500;
+    STATUS_TEXT = { 502: "Bad Gateway", 504: "Gateway Timeout" };
+  }
+});
+
 // packages/core/src/egress.ts
 function hostMatches(host, pattern) {
   const target = host.trim().toLowerCase();
@@ -3077,7 +3098,7 @@ var init_manifest = __esm({
     };
     CREATABLE_CONNECTION_KINDS = CONNECTION_KINDS.filter((kind) => !(kind in UNDELIVERED_KINDS));
     needsNoKey = (kind) => kind === "none";
-    ACCENTS = ["blue", "green", "sun", "purple", "red", "sky", "orange", "lime"];
+    ACCENTS = ["blue", "green", "sun", "purple", "red", "sky", "orange", "lime", "mint", "butter", "blush", "lilac"];
     SCHEDULE_LIMITS = {
       perApp: 10,
       minTimeoutMs: 3e4,
@@ -3344,6 +3365,29 @@ var init_runtime = __esm({
   }
 });
 
+// packages/core/src/ai-vendors.ts
+function aiRefusal(status, code, message, extra = {}) {
+  const error = { type: "wirl", code, message };
+  if (extra.scope !== void 0) error.scope = extra.scope;
+  if (extra.resets !== void 0) error.resets = extra.resets;
+  const headers = new Headers({ "content-type": "application/json; charset=utf-8", "cache-control": "no-store" });
+  if (extra.retryAfterSeconds !== void 0) headers.set("retry-after", String(extra.retryAfterSeconds));
+  return new Response(JSON.stringify({ error }, null, 2), { status, headers });
+}
+var AI_HOST, AI_VENDOR_SPECS;
+var init_ai_vendors = __esm({
+  "packages/core/src/ai-vendors.ts"() {
+    "use strict";
+    AI_HOST = "ai.wirl";
+    AI_VENDOR_SPECS = {
+      openrouter: { host: "openrouter.ai", prefix: "/api", keyHeader: "authorization", label: "OpenRouter" },
+      openai: { host: "api.openai.com", prefix: "", keyHeader: "authorization", label: "OpenAI" },
+      anthropic: { host: "api.anthropic.com", prefix: "", keyHeader: "x-api-key", label: "Anthropic" },
+      google: { host: "generativelanguage.googleapis.com", prefix: "", keyHeader: "x-goog-api-key", label: "Google" }
+    };
+  }
+});
+
 // packages/core/src/broker-stream.ts
 function mediaTypeOf(headers) {
   const declared = headers.get("content-type");
@@ -3784,9 +3828,14 @@ var init_broker_bodies = __esm({
 
 // packages/core/src/broker.ts
 async function handleBrokerRequest(request, deps) {
-  const holding = { body: null, answer: null };
+  const holding = { body: null, answer: null, tap: null, vendorStatus: null };
   try {
-    return await brokerCall(request, deps, holding);
+    const response = await brokerCall(request, deps, holding);
+    holding.tap?.end("error", holding.vendorStatus ?? response.status);
+    return response;
+  } catch (error) {
+    holding.tap?.end("error", holding.vendorStatus ?? 500);
+    throw error;
   } finally {
     holding.body?.release();
     holding.answer?.release();
@@ -3886,34 +3935,46 @@ async function brokerCall(request, deps, holding) {
     }
     requestBody = bodyRead.bytes;
   }
-  const connections = await deps.connectionsFor(appId, deploymentId);
   let connection;
-  if (route.slug === RESOLVE_BY_HOST) {
-    const target2 = request.headers.get("x-wirl-target");
-    if (!target2) {
-      await record("no_target", 400, "");
-      return refuse2(400, "no_target", "Resolving a connection by host needs X-Wirl-Target.");
-    }
-    path = egressAuditPath(target2);
-    const host2 = safeHost(target2);
-    const matches = connections.filter(
-      (candidate) => isHttpKind(candidate.kind) && host2.length > 0 && isHostAllowed(host2, candidate.allowedHosts)
-    );
-    if (matches.length === 0) {
-      await record("no_grant", 403, host2);
-      return refuse2(403, "no_grant", `No granted connection covers ${host2 || target2}.`);
-    }
-    if (matches.length > 1) {
-      await record("ambiguous", 403, host2);
-      return refuse2(
-        403,
-        "ambiguous",
-        `More than one granted connection covers ${host2}: ${matches.map((m) => m.slug).join(", ")}. Call /e/<connection>/ to say which.`
+  let aiUpstream = null;
+  const aiTarget = aiTargetOf(request);
+  if (aiTarget !== null) {
+    if (!deps.ai) return noAiAnswer();
+    const got = await deps.ai(request, { appId, deploymentId, origin }, aiTarget, requestBody);
+    if (got instanceof Response) return got;
+    holding.tap = onceTap(got.tap);
+    connection = got.connection;
+    aiUpstream = got.upstream;
+    if (got.body !== null) requestBody = got.body.buffer instanceof ArrayBuffer ? got.body : new Uint8Array(got.body);
+  } else {
+    const connections = await deps.connectionsFor(appId, deploymentId);
+    if (route.slug === RESOLVE_BY_HOST) {
+      const target2 = request.headers.get("x-wirl-target");
+      if (!target2) {
+        await record("no_target", 400, "");
+        return refuse2(400, "no_target", "Resolving a connection by host needs X-Wirl-Target.");
+      }
+      path = egressAuditPath(target2);
+      const host2 = safeHost(target2);
+      const matches = connections.filter(
+        (candidate) => isHttpKind(candidate.kind) && host2.length > 0 && isHostAllowed(host2, candidate.allowedHosts)
       );
+      if (matches.length === 0) {
+        await record("no_grant", 403, host2);
+        return refuse2(403, "no_grant", `No granted connection covers ${host2 || target2}.`);
+      }
+      if (matches.length > 1) {
+        await record("ambiguous", 403, host2);
+        return refuse2(
+          403,
+          "ambiguous",
+          `More than one granted connection covers ${host2}: ${matches.map((m) => m.slug).join(", ")}. Call /e/<connection>/ to say which.`
+        );
+      }
+      connection = matches[0];
+    } else {
+      connection = connections.find((candidate) => candidate.slug === route.slug);
     }
-    connection = matches[0];
-  } else {
-    connection = connections.find((candidate) => candidate.slug === route.slug);
   }
   if (!connection) {
     await record("no_grant", 403, "");
@@ -3949,7 +4010,7 @@ async function brokerCall(request, deps, holding) {
       `The "${connection.slug}" connection is a ${connection.kind} credential and is not reachable over http.`
     );
   }
-  const target = buildTarget(connection.baseUrl, route.rest, url.search, request);
+  const target = aiUpstream !== null ? aiUpstream.href : buildTarget(connection.baseUrl, route.rest, url.search, request);
   path = egressAuditPath(target);
   const host = safeHost(target);
   if (host.length === 0 || !isHostAllowed(host, connection.allowedHosts)) {
@@ -3971,6 +4032,7 @@ async function brokerCall(request, deps, holding) {
     if (STRIPPED.has(lower)) return;
     if (STRIPPED_PREFIXES.some((prefix) => lower.startsWith(prefix))) return;
     if (isHopHeader(lower)) return;
+    if (aiUpstream !== null && AI_KEY_HEADERS.has(lower)) return;
     headers.set(name, value);
   });
   attachCredential(headers, connection);
@@ -4005,10 +4067,21 @@ async function brokerCall(request, deps, holding) {
       await record("private_address", 403, safeHost(target));
       return refuse2(403, "private_address", error.message);
     }
-    if (request.signal.aborted) return callerLeft(record, safeHost(target));
+    if (request.signal.aborted) {
+      holding.tap?.end("cut", 499);
+      return callerLeft(record, safeHost(target));
+    }
     await record("upstream_error", 502, safeHost(target));
+    if (holding.tap !== null) {
+      holding.tap.end("error", 502);
+      return aiRefusal(502, "ai_vendor_unreachable", `${aiVendorLabel(slug)} could not be reached.`);
+    }
     return refuse2(502, "upstream_error", error instanceof Error ? error.message : String(error));
   }
+  if (holding.tap !== null) {
+    holding.vendorStatus = upstream.status;
+    holding.tap.answered?.(upstream.status);
+  }
   let upstreamBody;
   try {
     upstreamBody = upstream.body;
@@ -4027,6 +4100,8 @@ async function brokerCall(request, deps, holding) {
   if (upstreamBody !== null && isStreamedAnswer(upstream.status, upstream.headers)) {
     const body2 = holding.body;
     holding.body = null;
+    const tap = holding.tap;
+    holding.tap = null;
     return streamAnswer(upstream, upstreamBody, {
       appId,
       limit,
@@ -4037,7 +4112,8 @@ async function brokerCall(request, deps, holding) {
       sentMs: deps.streamSentMs ?? BROKER_LIMITS.cutEventSentMs,
       signal: request.signal,
       record: (outcome, status) => record(outcome, status, safeHost(target)),
-      held: body2
+      held: body2,
+      tap
     });
   }
   const heldAnswer = answers?.open(appId, ownerId) ?? null;
@@ -4050,7 +4126,10 @@ async function brokerCall(request, deps, holding) {
     return refuse2(502, refusal.error, refusal.message);
   }
   if (read.outcome === "error") {
-    if (request.signal.aborted) return callerLeft(record, safeHost(target));
+    if (request.signal.aborted) {
+      holding.tap?.end("cut", upstream.status);
+      return callerLeft(record, safeHost(target));
+    }
     await record("upstream_error", 502, safeHost(target));
     return refuse2(502, "upstream_error", read.error instanceof Error ? read.error.message : String(read.error));
   }
@@ -4059,6 +4138,11 @@ async function brokerCall(request, deps, holding) {
     return refuse2(502, "too_large", `The upstream returned more than ${limit} bytes.`);
   }
   const body = read.bytes;
+  if (holding.tap !== null) {
+    if (body.byteLength > 0) holding.tap.feed(body);
+    holding.tap.end("complete", upstream.status);
+    holding.tap = null;
+  }
   await record("allowed", upstream.status, safeHost(target));
   const out2 = answerHeaders(upstream.headers);
   const empty = upstream.status === 204 || upstream.status === 304;
@@ -4165,6 +4249,53 @@ function flowsTargetOf(request) {
 function noFlowsAnswer() {
   return refuse2(404, "no_flows", "Flows run in a preview: wirl preview, then wirl flows start <flow> --preview <name> --fast.");
 }
+function aiTargetOf(request) {
+  const target = request.headers.get("x-wirl-target");
+  if (target === null) return null;
+  let url;
+  try {
+    url = new URL(target);
+  } catch {
+    return null;
+  }
+  return url.hostname.toLowerCase().replace(/\.$/, "") === AI_HOST ? url : null;
+}
+function noAiAnswer() {
+  return aiRefusal(503, "ai_unavailable", "Models are not available here.");
+}
+function aiVendorLabel(slug) {
+  const vendor = slug.startsWith("ai:") ? slug.slice(3) : slug;
+  return Object.hasOwn(AI_VENDOR_SPECS, vendor) ? AI_VENDOR_SPECS[vendor].label : slug;
+}
+function onceTap(tap) {
+  let ended2 = false;
+  let answered = false;
+  return {
+    answered(status) {
+      if (ended2 || answered) return;
+      answered = true;
+      try {
+        tap.answered?.(status);
+      } catch {
+      }
+    },
+    feed(chunk) {
+      if (ended2) return;
+      try {
+        tap.feed(chunk);
+      } catch {
+      }
+    },
+    end(how, status) {
+      if (ended2) return;
+      ended2 = true;
+      try {
+        tap.end(how, status);
+      } catch {
+      }
+    }
+  };
+}
 function answerHeaders(upstream) {
   const out2 = new Headers();
   upstream.forEach((value, name) => {
@@ -4187,6 +4318,7 @@ function declaredLength(headers) {
 }
 async function streamAnswer(upstream, body, context) {
   const giveBack = () => context.held?.release();
+  const tap = context.tap ?? null;
   let release = giveBack;
   if (context.slots !== null) {
     const slot = context.slots.acquire(context.appId);
@@ -4194,6 +4326,7 @@ async function streamAnswer(upstream, body, context) {
       await body.cancel().catch(() => {
       });
       giveBack();
+      tap?.end("error", upstream.status);
       await context.record("busy", 429);
       return refuse2(
         429,
@@ -4212,17 +4345,19 @@ async function streamAnswer(upstream, body, context) {
     await body.cancel().catch(() => {
     });
     release();
+    tap?.end("error", upstream.status);
     throw error;
   }
   try {
-    return new Response(passOn(body, context.limit, release, context.safetyMs, context.signal, context.closing, context.sent, context.sentMs), {
-      status: upstream.status,
-      headers: answerHeaders(upstream.headers)
-    });
+    return new Response(
+      passOn(body, context.limit, release, context.safetyMs, context.signal, context.closing, context.sent, context.sentMs, tap, upstream.status),
+      { status: upstream.status, headers: answerHeaders(upstream.headers) }
+    );
   } catch (error) {
     await body.cancel().catch(() => {
     });
     release();
+    tap?.end("error", upstream.status);
     throw error;
   }
 }
@@ -4247,7 +4382,7 @@ async function eventSent(sent, ms) {
     stop.abort();
   }
 }
-function passOn(body, limit, release, safetyMs, signal, closing, sent, sentMs) {
+function passOn(body, limit, release, safetyMs, signal, closing, sent, sentMs, tap = null, status = 200) {
   const reader = body.getReader();
   const says = closing && limit > CUT_EVENT_RESERVE_BYTES;
   const room = says ? limit - CUT_EVENT_RESERVE_BYTES : limit;
@@ -4258,16 +4393,17 @@ function passOn(body, limit, release, safetyMs, signal, closing, sent, sentMs) {
   let safety;
   let appLeft = () => {
   };
-  const finish = () => {
+  const finish = (how) => {
     if (over) return false;
     over = true;
     clearTimeout(safety);
     signal.removeEventListener("abort", appLeft);
     release();
+    tap?.end(how, status);
     return true;
   };
   const cut2 = (controller, error, why) => {
-    if (!finish()) return;
+    if (!finish("cut")) return;
     reader.cancel(error).catch(() => {
     });
     if (!says) {
@@ -4304,7 +4440,7 @@ function passOn(body, limit, release, safetyMs, signal, closing, sent, sentMs) {
         timer.unref?.();
         safety = timer;
         appLeft = () => {
-          if (!finish()) return;
+          if (!finish("cut")) return;
           reader.cancel(signal.reason).catch(() => {
           });
           controller.close();
@@ -4327,12 +4463,12 @@ function passOn(body, limit, release, safetyMs, signal, closing, sent, sentMs) {
         } catch (error) {
           const bound = error instanceof PinnedFetchError ? error.streamBound : void 0;
           if (bound !== void 0) cut2(controller, error, { cause: bound.kind, ms: bound.ms });
-          else if (finish()) controller.error(error);
+          else if (finish("error")) controller.error(error);
           return;
         }
         if (over) return;
         if (next.done) {
-          finish();
+          finish("complete");
           controller.close();
           return;
         }
@@ -4347,10 +4483,11 @@ function passOn(body, limit, release, safetyMs, signal, closing, sent, sentMs) {
           );
           return;
         }
+        tap?.feed(next.value);
         controller.enqueue(next.value);
       },
       cancel(reason) {
-        finish();
+        finish("cut");
         clearTimeout(unread);
         return reader.cancel(reason).catch(() => {
         });
@@ -4475,10 +4612,11 @@ function refuse2(status, reason, message, extra = {}) {
     })
   });
 }
-var RESOLVE_BY_HOST, STRIPPED_PREFIXES, STRIPPED, HOP_PREFIXES, HOP_HEADERS, isHopHeader, HAND_OUT_BYTES, AUDIT_PATH_CHARS, STALLED, SLOW, FIRST_HOLD_BYTES, CREDENTIAL_SHAPES, isHttpKind, safeHost;
+var RESOLVE_BY_HOST, STRIPPED_PREFIXES, AI_KEY_HEADERS, STRIPPED, HOP_PREFIXES, HOP_HEADERS, isHopHeader, HAND_OUT_BYTES, AUDIT_PATH_CHARS, STALLED, SLOW, FIRST_HOLD_BYTES, CREDENTIAL_SHAPES, isHttpKind, safeHost;
 var init_broker = __esm({
   "packages/core/src/broker.ts"() {
     "use strict";
+    init_ai_vendors();
     init_broker_bodies();
     init_broker_stream();
     init_broker_token();
@@ -4488,6 +4626,7 @@ var init_broker = __esm({
     init_token();
     RESOLVE_BY_HOST = "_";
     STRIPPED_PREFIXES = ["x-wirl-"];
+    AI_KEY_HEADERS = /* @__PURE__ */ new Set([...Object.values(AI_VENDOR_SPECS).map((spec) => spec.keyHeader), "api-key"]);
     STRIPPED = /* @__PURE__ */ new Set([
       "authorization",
       "proxy-authorization",
@@ -4608,7 +4747,11 @@ var init_retention = __esm({
        * The counts settle a "why was my app paused" question and the claims
        * ration the mail; neither is worth anything two months on.
        */
-      flowDayRowsDays: 60
+      flowDayRowsDays: 60,
+      /** A row of the AI call ledger is kept this long, then removed. */
+      aiCallDays: 90,
+      /** An AI monthly total (the rows the caps read) is kept this long, 24 months. */
+      aiMonthDays: 730
     };
     DELETED_SHARE_MARK = "deleted; a restore brings this share back; its data is kept until";
   }
@@ -4666,6 +4809,7 @@ own live deploy and a person's yes. Declare a host under \`connections\`, then \
 wirl attaches the key. An undeclared host is refused; a public API needing no key uses \`"kind": "none"\`.
 Declaring one deploys before anyone approves it; the deploy says per connection whether it is usable now or
 waiting on an admin. A vendor has 60 seconds to answer, whole, unless it streams: ask a model for a stream.
+Models: \`https://ai.wirl/<vendor>/\u2026\` (openrouter, openai, anthropic, google) with the vendor's own API and no key; OpenRouter works out of the box on wirl's allowance, an org's own key lifts it. See Models.
 
 Six headers say who is asking: \`x-wirl-user-id\`, \`x-wirl-user-email\`, \`x-wirl-user-name\`,
 \`x-wirl-role\`, \`x-wirl-app-id\`, \`x-wirl-org\`. Read the name with
@@ -4718,7 +4862,7 @@ var init_version = __esm({
   "packages/core/src/version.ts"() {
     "use strict";
     WORKSPACE_VERSION = "0.0.0";
-    BUILT_VERSION = true ? "0.2.3" : null;
+    BUILT_VERSION = true ? "0.2.5" : null;
   }
 });
 
@@ -5120,6 +5264,7 @@ var init_src = __esm({
     init_slug();
     init_token();
     init_broker_token();
+    init_broker_status();
     init_egress();
     init_manifest();
     init_sql_lex();
@@ -5147,6 +5292,7 @@ var init_src = __esm({
     init_manifest_transport();
     init_preview();
     init_visit_token();
+    init_ai_vendors();
   }
 });
 
@@ -6406,7 +6552,7 @@ function searchGroup(text) {
       ]
     }
   ];
-  if (STATUS_TEXT.test(text)) filters.push({ key: "$workers.event.response.status", type: "number", operation: "eq", value: Number(text) });
+  if (STATUS_TEXT2.test(text)) filters.push({ key: "$workers.event.response.status", type: "number", operation: "eq", value: Number(text) });
   return { kind: "group", filterCombination: "or", filters };
 }
 function kindFilters(kind) {
@@ -6427,7 +6573,7 @@ function kindFilters(kind) {
       return [];
   }
 }
-var LogSourceError, DEFAULTS3, DATASET, MAX_EVENTS, RUN_HEADER, PUBLIC_HEADER, FLOW_HEADER, NOT_A_FLOW_STEP, serviceFilter, failedGroup, STATUS_TEXT, WorkersLogSource;
+var LogSourceError, DEFAULTS3, DATASET, MAX_EVENTS, RUN_HEADER, PUBLIC_HEADER, FLOW_HEADER, NOT_A_FLOW_STEP, serviceFilter, failedGroup, STATUS_TEXT2, WorkersLogSource;
 var init_workers_logs = __esm({
   "packages/runtime/src/workers-logs.ts"() {
     "use strict";
@@ -6456,7 +6602,7 @@ var init_workers_logs = __esm({
         { key: "$workers.outcome", type: "string", operation: "neq", value: "ok" }
       ]
     });
-    STATUS_TEXT = /^\d{3}$/;
+    STATUS_TEXT2 = /^\d{3}$/;
     WorkersLogSource = class {
       #opts;
       constructor(options) {
@@ -7262,11 +7408,12 @@ company email domain; in any other org, including a personal one or one
 made with \`wirl orgs create\`, it starts private. Deploys are one
 command; sharing is by email; a third-party API is declared, never pasted.`;
 var SKILL_DOCS_LINE = "Before you build, fetch https://docs.wirl.dev/llms-full.txt: every page of the docs as one Markdown file, so there is no need to read the site page by page.";
-var SKILL_RULES = `1. **Never ask for or paste an API key.** Declare the connection in \`wirl.json\` and deploy. Needs no key at all (a public API)? Declare it with "kind": "none" and its hosts. If the key is missing, the deploy prints a link to the app's keys page; show the person that link. Locally, keys live in \`.wirl/keys.json\`, which git ignores. To try a vendor call locally without the key, map its connection to a server of your own in \`.wirl/mocks.json\`, like \`{ "anthropic": "http://127.0.0.1:4010" }\`: \`wirl dev\` then sends the calls to that connection's hosts there instead (\`wirl dev --help\` has the rest).
+var SKILL_RULES = `1. **Never ask for or paste an API key.** Declare the connection in \`wirl.json\` and deploy. Needs no key at all (a public API)? Declare it with "kind": "none" and its hosts. If the key is missing, the deploy prints a link to the app's keys page; show the person that link. Locally, keys live in \`.wirl/keys.json\`, which git ignores. To try a vendor call locally without the key, map its connection to a server of your own in \`.wirl/mocks.json\`, like \`{ "anthropic": "http://127.0.0.1:4010" }\`: \`wirl dev\` then sends the calls to that connection's hosts there instead (\`wirl dev --help\` has the rest). Models need no key either: call https://ai.wirl/<vendor>/\u2026 (see Models).
 2. **Call third-party APIs by their real URL** (\`fetch("https://api.hubspot.com/...")\`). wirl attaches the key on the way out, deployed and under \`wirl dev\` alike.
-3. If a command names several organisations and asks which, ask the person; pass \`--org\` or put \`"org"\` in \`wirl.json\`.
-4. To keep a file out of the deploy, list it in a \`.wirlignore\` at the project root (gitignore-style lines; no \`!\` negation).
-5. **A file that can lose data waits for a person.** A deploy that would apply a destructive file (one wirl.json's \`"destructive"\` list must name) to the live database stops and names the page where a person approves each one. Show the person those pages, and deploy again once they say they approved. If \`${WIRL_BIN} deploy\` asks you to type a file's name, stop it and show the page instead, or deploy with \`--json\`, which never asks. Never type the name yourself or send the confirmation: that is the person's, and no flag skips it.`;
+3. **Asked to connect an app to Slack, or to receive events from any outside service:** follow the pattern on https://docs.wirl.dev/models (public path with "verify": "slack", a connection of kind http_bearer for the bot token and one of kind webhook_secret for the signing secret, the Slack app manifest you give the person to create the app with). Never ask for the token or secret in chat: the person pastes them on the app's Connections page, and you say which two values.
+4. If a command names several organisations and asks which, ask the person; pass \`--org\` or put \`"org"\` in \`wirl.json\`.
+5. To keep a file out of the deploy, list it in a \`.wirlignore\` at the project root (gitignore-style lines; no \`!\` negation).
+6. **A file that can lose data waits for a person.** A deploy that would apply a destructive file (one wirl.json's \`"destructive"\` list must name) to the live database stops and names the page where a person approves each one. Show the person those pages, and deploy again once they say they approved. If \`${WIRL_BIN} deploy\` asks you to type a file's name, stop it and show the page instead, or deploy with \`--json\`, which never asks. Never type the name yourself or send the confirmation: that is the person's, and no flag skips it.`;
 var SKILL_MANIFEST_EXAMPLE = `\`\`\`json
 { "app": "crm-sync", "server": "server.mjs", "connections": [{ "slug": "hubspot", "hosts": ["api.hubspot.com"] }] }
 \`\`\``;
@@ -7318,37 +7465,59 @@ init_src();
 var STARTER_CONFLICT = "Choose one: --server or --starter.";
 var SUGGESTIONS = [
   {
-    title: "Rename it to something we'd actually use",
-    prompt: `Rename this noticeboard to something my team would actually use. Ask me what we would use it for, suggest three names, and when I pick one, change the page's title and heading and the description in wirl.json to match. Keep "app" in wirl.json as it is: a new name there would make a second app at a new address. Then deploy it with wirl deploy.`
-  },
-  {
-    title: "Try a new look in a preview first",
-    prompt: "Give the noticeboard a warmer look: pinned notes as coloured cards, and tags as small coloured labels. Put it up with wirl preview first and give me the preview's address to check. Deploy it with wirl deploy only after I say it looks right."
+    number: 1,
+    title: "Summarise the week",
+    capability: "A model comes with every app. Your agent just uses it; nothing to sign up for or paste.",
+    prompt: `Add a "Summarise this week" button above the notes. When pressed, send this week's notes to a language model and show a three-line summary at the top of the page. Try it with wirl dev, then deploy it with wirl deploy. Keep the latest summary so everyone who opens the page sees it.`,
+    youGet: "a summary card above the notes."
   },
   {
-    title: "Add a due date to notes",
-    prompt: "Add an optional due date to notes on the noticeboard. Add the column in a new file, migrations/0002_due_date.sql, and never edit 0001. Let people set the date when they post or edit a note, show it on each note, and put notes due soonest at the top. Try it with wirl dev, then deploy it with wirl deploy."
+    number: 2,
+    title: "Give notes a due date",
+    capability: "The database is yours. Changing its shape is one migration file and one deploy; wirl applies it before the new version goes live, and the Data page on the dashboard shows the result.",
+    prompt: "Add an optional due date to notes. Add the column in a new migration file with the next number, and never edit a migration that has already been applied. Let people set the date when they post or edit a note, show it on each note, and put notes due soonest at the top. Try it with wirl dev, then deploy it with wirl deploy.",
+    youGet: "a date on each note, the soonest first, and a new column on the Data page."
   },
   {
-    title: "Show the weather from a public API",
-    prompt: `Show today's weather for our office at the top of the noticeboard, from Open-Meteo, a public weather API that needs no key. Ask me which city our office is in. Add this entry to "connections" in wirl.json: {"slug": "open-meteo", "kind": "none", "hosts": ["api.open-meteo.com"]}. Fetch Open-Meteo's own URL from server.mjs, and deploy it with wirl deploy. If the deploy says open-meteo is waiting, the connection needs approving, which your sign-in cannot do: tell me to approve it on the app's Connections page on app.wirl.dev, or to ask an admin of our organisation to. The weather shows once it is approved.`
+    number: 3,
+    title: "Pull in something from outside",
+    capability: "Every call out goes through wirl. The agent declares the host as a connection; a public API needs no key, and one that does gets its key on the dashboard, never in the code.",
+    prompt: `Show today's weather under the notes for our city (ask me which city if you don't know), from a public weather API that needs no key. Declare the API's host as a connection in wirl.json with "kind": "none". Try it with wirl dev, then deploy it with wirl deploy. If the deploy says the connection is waiting on an admin, show me the link it prints.`,
+    youGet: "a weather line under the notes, and the host listed on the app's Connections page."
   },
   {
-    title: "Change when the tidy-up runs",
-    prompt: "Change the noticeboard's nightly tidy-up: archive notes after 14 days instead of 30, and run it at 6pm on weekdays in my time zone (ask me which). Change the schedule in wirl.json and the number in server.mjs, deploy it with wirl deploy, then run it once with wirl run tidy and tell me what it said."
+    number: 4,
+    title: "Try a new look before anyone sees it",
+    // The mock says "Previews are free."; the starter carries no price words (its test forbids "free").
+    capability: "Previews are a safe place to try. A preview gets its own address and its own database, so you can look at a change with a colleague before it goes live.",
+    prompt: "Give the noticeboard a calmer look: more space between notes, a softer background, the newest note set apart at the top. Put it up as a preview called new-look with wirl preview and give me the link. Don't deploy it yet. Keep the change on a branch and don't run wirl deploy until I say deploy it.",
+    youGet: 'a second address to open next to this one. Say "deploy it" when you like it.'
   },
   {
-    title: "Find out what happened from the logs",
-    prompt: "Read this app's logs with wirl logs and tell me, in a few lines, what people did on the noticeboard today and whether anything failed."
+    number: 5,
+    title: "Share it with a colleague",
+    capability: "Company sign-in is already on. Anyone you name opens the link with their work account; the Access page shows who can, and you can take it back any time.",
+    prompt: "Help me share this app with a colleague: tell me how to give them access and the link they open.",
+    youGet: "their name on the Access page, and a link they open with their work account."
   },
   {
-    title: "Share it with a colleague",
-    prompt: `Help me share this noticeboard with a colleague. Sharing is done by me, not by a deploy: tell me to share it from the app's Access page on app.wirl.dev (the "Who can open it" row on the noticeboard links to it), where I add their email address. Then tell me what they will see when they open the address.`
+    number: 6,
+    title: "Connect it to Slack",
+    capability: "Apps can reach the tools your company already uses. Your agent knows wirl's Slack pattern: it gives you a Slack app to create in one click, you paste two values on the app's Connections page, and the noticeboard starts a DM with you. Ask it about the notes, or tell it to add one, from Slack.",
+    prompt: "Connect this noticeboard to Slack so it DMs me this week's summary and I can chat with it there: ask it about the notes, or tell it to add or change one. Give me the Slack app manifest to create the app with, and tell me which two values to paste on the app's Connections page.",
+    youGet: "a DM from the noticeboard in Slack. Everything above works without it.",
+    optional: true
   }
 ];
+var splitCapability = (capability) => {
+  const stop = capability.indexOf(". ");
+  return [capability.slice(0, stop + 1), capability.slice(stop + 2)];
+};
 var SUGGESTIONS_SOURCE = [
   "const SUGGESTIONS = [",
-  ...SUGGESTIONS.map(({ title, prompt }) => `  { title: ${JSON.stringify(title)}, prompt: ${JSON.stringify(prompt)} },`),
+  ...SUGGESTIONS.map(
+    ({ number, title, capability, prompt, youGet, optional }) => `  { number: ${String(number)}, title: ${JSON.stringify(title)}, capability: ${JSON.stringify(capability)}, prompt: ${JSON.stringify(prompt)}, youGet: ${JSON.stringify(youGet)}${optional ? ", optional: true" : ""} },`
+  ),
   "];"
 ].join("\n");
 var SERVER_HEAD = String.raw`/**
@@ -7356,12 +7525,13 @@ var SERVER_HEAD = String.raw`/**
  *
  * Your team posts short notes here, tags them, pins the ones everyone should
  * see, and edits or removes their own. Every night a schedule archives old
- * notes nobody pinned. The page also explains itself: a "How this works on
- * wirl" panel, one row per feature, each linking to that page of the app on
- * app.wirl.dev, and a few changes to ask your coding agent for next.
+ * notes nobody pinned. Below the notes, "Make it yours": six prompts to
+ * paste to your coding agent, in order, each saying what wirl gives the app
+ * and what you get. Under them, the app's pages on app.wirl.dev.
  *
  * The whole app is this one file:
- * - The page is HTML this module returns: plain forms, no script.
+ * - The page is HTML this module returns: plain forms, and one small script
+ *   for the Copy prompt buttons.
  * - Notes live in env.DB, a SQLite database that belongs to this app alone.
  *   Its tables are in migrations/0001_init.sql, and wirl applies each new
  *   file in migrations/ before a version goes live. Put the next change in
@@ -7526,16 +7696,30 @@ async function page(request, url, me, env) {
     "<style>" + STYLE + "</style>",
     "<main>",
     "<header><h1>" + TITLE + "</h1>",
-    "<p class='dim'>Your first app on wirl. Signed in as <b>" + escape(me.name) + "</b>" + (me.role ? " (" + escape(me.role) + ")" : "") + ".</p></header>",
+    "<p class='dim'>Signed in as <b>" + escape(me.name) + "</b>" + (me.role ? " (" + escape(me.role) + ")" : "") + ".</p></header>",
+    me.role === "owner" ? welcome() : "",
     shown,
     "<ul class='notes'>" + (notes.length === 0 ? "<li class='dim'>Nothing here yet.</li>" : notes.map((note) => card(note, me, archived)).join("")) + "</ul>",
-    panel(request, me, lastRun),
-    suggestions(),
+    "<p class='dim'>Nightly tidy-up, which archives notes older than " + ARCHIVE_AFTER_DAYS + " days that nobody pinned: " +
+      (lastRun ? "last run " + escape(lastRun.ran_at.slice(0, 16)) + " UTC: " + escape(lastRun.note) : "Not run yet.") + "</p>",
+    prompts(request),
     "</main>",
+    COPY_SCRIPT,
     "</html>",
   ].join("\n");
 }
 
+// For the app's owner only: what this is, in a box above the note form.
+function welcome() {
+  return [
+    "<section class='welcome'>",
+    "<p class='kicker'>Your first app on wirl</p>",
+    "<h2>Your coding agent just built this, and it's live.</h2>",
+    "<p>A small team noticeboard: notes, a nightly tidy-up, company sign-in, its own database. It runs at this address, it's private to you until you share it, and it's yours to change. Try out the app below and then customize it.</p>",
+    "</section>",
+  ].join("");
+}
+
 function form() {
   return [
     "<form class='add' method='post' action='/notes'>",
@@ -7575,50 +7759,58 @@ function card(note, me, archived) {
   );
 }
 
-// The app's page on the dashboard, from the address it was opened at:
+// The app's pages on the dashboard, from the address it was opened at:
 // <org>--<app>.wirl.run, or <org>--<app>--<preview>.wirl.run for a preview.
 // Under wirl dev the address is 127.0.0.1, which names no app: null.
 function dashboard(request) {
   const label = new URL(request.url).hostname.split(".")[0];
   const parts = label.split("--");
   if (parts.length < 2) return null;
-  const org = request.headers.get("x-wirl-org") || parts[0];
-  return DASHBOARD + "/apps/" + encodeURIComponent(org) + "/" + encodeURIComponent(parts[1]);
-}
-
-function panel(request, me, lastRun) {
-  const base = dashboard(request);
-  const last = lastRun ? "Last run " + lastRun.ran_at.slice(0, 16) + " UTC: " + lastRun.note : "Not run yet.";
-  // One row per feature: what it is, what it does in this app, and its page.
-  const rows = [
-    ["Who can open it", "wirl signed you in before this page loaded and tells the app who you are, in headers: here you are " + me.name + (me.role ? ", " + me.role : "") + ". The app has no sign-in code of its own. It started private to you; choose who else can open it on Access.", "/access", "Access"],
-    ["Your data", "Notes are rows in this app's own SQLite database. Its tables are in migrations/0001_init.sql, and a deploy applies each new file in migrations/ before it goes live.", "/deployments", "Deployments"],
-    ["A schedule", "tidy runs every night at 02:00 UTC and archives notes older than " + ARCHIVE_AFTER_DAYS + " days that nobody pinned. " + last + " Run it now from Overview.", "", "Overview"],
-    ["Logs", "Each request writes a line with console.log, and so does each change to a note. Read them on Logs, or ask your agent to run wirl logs.", "/logs", "Logs"],
-    ["Versions", "Each wirl deploy is a new version, and the earlier ones stay: going back to one takes a click.", "/deployments", "Deployments"],
-    ["Previews", "wirl preview puts a change up at an address of its own, with its own database, and nothing goes live until you deploy. Open previews are listed on Overview.", "", "Overview"],
-    ["Outside APIs", "Declare a connection in wirl.json and fetch the service's own URL: wirl adds the key on the way out, so it never reaches this code or a chat.", "/connections", "Connections"],
-    ["Settings", "Describe the app for your team's list of tools, hand it to someone else, or delete it.", "/settings", "Settings"],
+  const org = encodeURIComponent(request.headers.get("x-wirl-org") || parts[0]);
+  return { app: DASHBOARD + "/apps/" + org + "/" + encodeURIComponent(parts[1]), org: DASHBOARD + "/orgs/" + org };
+}
+
+// The onboarding path: each prompt whole, visible and ready to select and
+// copy, with what wirl gives the app and what you get. Then what the app
+// already uses, and its pages on the dashboard.
+function prompts(request) {
+  const where = dashboard(request);
+  const pages = [
+    ["Overview", "app", ""],
+    ["Data", "app", "/data"],
+    ["Access", "app", "/access"],
+    ["Logs", "app", "/logs"],
+    ["Deployments", "app", "/deployments"],
+    ["Models", "org", "/models"],
+    ["Connections", "app", "/connections"],
+    ["Settings", "app", "/settings"],
   ];
+  const link = ([label, of, path]) =>
+    where === null ? "<span class='dim'>" + label + "</span>" : "<a href='" + escape(where[of] + path) + "'>" + label + "</a>";
+  const step = (each) => {
+    const stop = each.capability.indexOf(". ");
+    return (
+      "<li class='step" + (each.number === 1 ? " first" : "") + (each.optional ? " optional" : "") + "'>" +
+      "<h3><span class='number'>" + each.number + "</span> " + escape(each.title) +
+      (each.number === 1 ? " <span class='badge start'>Start here</span>" : "") +
+      (each.optional ? " <span class='badge'>Optional. The big one.</span>" : "") + "</h3>" +
+      "<p class='dim'><b>" + escape(each.capability.slice(0, stop + 1)) + "</b> " + escape(each.capability.slice(stop + 2)) + "</p>" +
+      "<div class='getrow'>" +
+      "<button type='button' class='copy' data-copy-for='prompt-" + each.number + "'>Copy prompt</button>" +
+      "<p class='dim'>You get: " + escape(each.youGet) + "</p></div>" +
+      "<details class='prompt'><summary>Show the prompt</summary>" +
+      "<pre id='prompt-" + each.number + "'>" + escape(each.prompt) + "</pre></details>" +
+      "</li>"
+    );
+  };
   return [
-    "<section><h2>How this works on wirl</h2>",
-    "<table>",
-    ...rows.map(([feature, what, path, label]) =>
-      "<tr><td>" + feature + "</td><td>" + escape(what) + "</td><td>" +
-      (base === null ? "<span class='dim'>" + label + "</span>" : "<a href='" + escape(base + path) + "'>" + label + "</a>") +
-      "</td></tr>",
-    ),
-    "</table>",
-    base === null ? "<p class='dim'>Running under wirl dev, so these pages are not linked here: they open on app.wirl.dev once it is deployed.</p>" : "",
-    "</section>",
-  ].join("\n");
-}
-
-function suggestions() {
-  return [
-    "<section><h2>Ask your agent for a first change</h2>",
-    "<p class='dim'>Each of these is a whole prompt. Open one, copy it, and paste it to the coding agent that made this app.</p>",
-    ...SUGGESTIONS.map((each) => "<details><summary>" + escape(each.title) + "</summary><pre>" + escape(each.prompt) + "</pre></details>"),
+    "<section id='prompts'><h2>Make it yours</h2>",
+    "<p>This app is live, at a link your team can open. Everything below is a whole prompt. Copy one, paste it to the coding agent that made this app, and the feature appears here on the next deploy. Go in order or skip around; the last one is the big one.</p>",
+    "<ol class='steps'>",
+    ...SUGGESTIONS.map(step),
+    "</ol>",
+    "<p class='dim uses'>This app already uses a database, a nightly schedule, company sign-in and logs. Each has a page on the dashboard: " + pages.map(link).join(" · ") + "</p>",
+    where === null ? "<p class='dim'>Running under wirl dev, so these pages are not linked here: they open on app.wirl.dev once it is deployed.</p>" : "",
     "</section>",
   ].join("\n");
 }
@@ -7635,6 +7827,7 @@ const STYLE = [
   "a { color: var(--accent); } .dim { color: var(--dim); }",
   "form.add, form.edit { display: grid; gap: 8px; margin: 16px 0 8px; }",
   "textarea, input, button { font: inherit; color: inherit; padding: 7px 10px; border: 1px solid var(--line); border-radius: 6px; background: var(--card); }",
+  "button.copy { min-height: 44px; margin-top: 4px; }",
   "button { cursor: pointer; } button.primary { justify-self: start; background: var(--accent); border-color: var(--accent); color: var(--bg); }",
   "ul.notes { list-style: none; padding: 0; display: grid; gap: 10px; }",
   ".note { background: var(--card); border: 1px solid var(--line); border-radius: 8px; padding: 12px 14px; }",
@@ -7643,13 +7836,49 @@ const STYLE = [
   ".meta, .actions { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; font-size: 13px; }",
   ".actions { margin-top: 8px; } .actions form { margin: 0; } .actions details { flex-basis: 100%; order: 3; }",
   ".tag { text-decoration: none; }",
-  "table { width: 100%; border-collapse: collapse; font-size: 14px; }",
-  "td { border-top: 1px solid var(--line); padding: 8px 6px; vertical-align: top; }",
-  "td:first-child { font-weight: 600; }",
-  "pre { white-space: pre-wrap; background: var(--card); border: 1px solid var(--line); border-radius: 6px; padding: 10px; font-size: 13px; }",
+  "ol.steps { list-style: none; padding: 0; display: grid; gap: 12px; }",
+  ".step { background: var(--card); border: 1px solid var(--line); border-radius: 8px; padding: 12px 14px; }",
+  ".step.optional { border: 2px solid var(--accent); }",
+  ".step h3 { font-size: 16px; margin: 0 0 6px; display: flex; flex-wrap: wrap; align-items: center; gap: 8px; }",
+  ".step p { margin: 6px 0; } .step b { color: var(--accent); }",
+  ".number { font-size: 12px; background: var(--ink); color: var(--bg); padding: 2px 7px; border-radius: 5px; }",
+  ".optional .number { background: var(--accent); }",
+  ".badge { font-size: 12px; font-weight: 600; color: var(--dim); border: 1px solid var(--line); padding: 1px 8px; border-radius: 999px; }",
+  ".step.first { border: 2px solid var(--accent); }",
+  ".badge.start { color: var(--accent); border-color: var(--accent); }",
+  ".welcome { background: var(--card); border: 1px solid var(--line); border-radius: 8px; padding: 14px 16px; margin: 16px 0 8px; }",
+  ".welcome h2 { font-size: 19px; margin: 4px 0 8px; } .welcome p { margin: 0; }",
+  ".welcome .kicker { font-size: 12px; font-weight: 600; letter-spacing: 0.06em; text-transform: uppercase; color: var(--accent); }",
+  ".getrow { display: flex; flex-wrap: wrap; align-items: center; gap: 4px 12px; } .getrow p { margin: 0; }",
+  "details.prompt summary { display: flex; align-items: center; min-height: 44px; color: var(--dim); font-size: 14px; cursor: pointer; }",
+  ".uses { border-top: 1px solid var(--line); padding-top: 12px; font-size: 14px; }",
+  "pre { white-space: pre-wrap; user-select: all; background: var(--bg); border: 1px solid var(--line); border-radius: 6px; padding: 10px; font-size: 13px; }",
   "details { margin: 6px 0; } summary { cursor: pointer; }",
 ].join("\n");
 
+const COPY_SCRIPT = [
+  "<script>",
+  "document.addEventListener('click', (event) => {",
+  "  const button = event.target.closest('.copy');",
+  "  if (!button) return;",
+  "  const pre = document.getElementById(button.getAttribute('data-copy-for'));",
+  "  const flash = (label) => {",
+  "    button.textContent = label;",
+  "    setTimeout(() => { button.textContent = 'Copy prompt'; }, 1500);",
+  "  };",
+  "  const select = () => {",
+  "    const range = document.createRange();",
+  "    range.selectNodeContents(pre);",
+  "    window.getSelection().removeAllRanges();",
+  "    window.getSelection().addRange(range);",
+  "    flash('Select and copy');",
+  "  };",
+  "  if (!navigator.clipboard) return select();",
+  "  navigator.clipboard.writeText(pre.textContent).then(() => flash('Copied'), select);",
+  "});",
+  "</script>",
+].join("\n");
+
 const home = (to = "/") => new Response(null, { status: 303, headers: { location: to } });
 
 const text = (body, status = 200) => new Response(body, { status, headers: { "content-type": "text/plain; charset=utf-8" } });
@@ -7687,7 +7916,7 @@ var STARTER_MIGRATION = [
   "-- Make the next change in 0002_<what>.sql; never edit a file that has been deployed.",
   "create table notes (id integer primary key, body text not null, tags text not null default '', pinned integer not null default 0, author_id text not null, author_name text not null default '', created_at text not null default (datetime('now')), archived_at text)",
   "create table runs (id integer primary key, schedule text not null, note text not null, ran_at text not null default (datetime('now')))",
-  "insert into notes (body, tags, pinned, author_id, author_name) values ('Welcome to the noticeboard. Post a note below, tag it, and pin the ones everyone should see.', 'welcome', 1, '', 'wirl')",
+  "insert into notes (body, tags, pinned, author_id, author_name) values ('Welcome to the noticeboard. This note is pinned so everyone sees it first; post your own below.', 'welcome', 1, '', 'wirl')",
   ""
 ].join("\n");
 function starterManifest(app, org) {
@@ -7708,7 +7937,7 @@ var README = [
   "",
   "Your first app on wirl: a board where your team posts short notes, tags them, pins the ones everyone should see, and edits or removes their own. Every night a schedule archives old notes nobody pinned.",
   "",
-  'Open it at the address `wirl deploy` prints. It starts private to you. Its page has a "How this works on wirl" panel: one row per thing wirl does for this app, each linking to that page of the app on app.wirl.dev.',
+  "Open it at the address `wirl deploy` prints. It starts private to you. Its page is the way in: six prompts to give your coding agent, each saying what wirl gives the app and what you get, and under them the app's pages on app.wirl.dev.",
   "",
   "## What is where",
   "",
@@ -7723,11 +7952,14 @@ var README = [
   "",
   "It prints the address to open, and a `curl` line that runs the nightly tidy-up now.",
   "",
-  "## Changes to ask your agent for",
+  "## Make it yours",
   "",
-  "Each is a whole prompt: paste it to your coding agent as it is.",
+  "The same six prompts as the page. Each is a whole prompt: paste it to your coding agent as it is. Go in order or skip around; the last one is the big one.",
   "",
-  ...SUGGESTIONS.flatMap(({ title, prompt }) => [`### ${title}`, "", `> ${prompt}`, ""])
+  ...SUGGESTIONS.flatMap(({ number, title, capability, prompt, youGet, optional }) => {
+    const [bold, rest] = splitCapability(capability);
+    return [`### ${String(number)}. ${title}`, "", ...optional ? ["Optional. The big one.", ""] : [], `**${bold}** ${rest}`, "", `> ${prompt}`, "", `You get: ${youGet}`, ""];
+  })
 ].join("\n");
 var STARTER_FILES = {
   "server.mjs": SERVER_MODULE,
@@ -7798,6 +8030,14 @@ async function loadCredentials(env = process.env) {
   }
   throw new CliError("Not signed in.", `Run \`${WIRL_BIN} login\` first, or set WIRL_TOKEN.`, { code: "not_signed_in" });
 }
+async function loadCredentialsIfAny(env = process.env) {
+  try {
+    return await loadCredentials(env);
+  } catch (error) {
+    if (error instanceof CliError && error.code === "not_signed_in") return null;
+    throw error;
+  }
+}
 async function saveCredentials(creds, env = process.env) {
   const path = credentialsPath(env);
   await mkdir3(dirname3(path), { recursive: true });
@@ -8513,7 +8753,7 @@ async function callApiBytes(creds, path, options = {}) {
       body = {};
     }
     if (response.status === 401 || response.status === 403) {
-      throw new CliError("Not signed in, or this token cannot do that.", `Try \`${WIRL_BIN} login\`.`);
+      throw new CliError("Not signed in, or this token cannot do that.", `Try \`${WIRL_BIN} login\`.`, { code: "unauthenticated" });
     }
     if (response.status === 404) throw new CliError("Not found, or you do not have access to it.");
     throw new CliError(body.message ?? body.error ?? `Request failed (${response.status}).`);
@@ -10693,6 +10933,8 @@ function orMock(declared) {
 var MOCKS_FILE = join6(".wirl", "mocks.json");
 var MOCKS_FILE_MAX_BYTES = 65536;
 var MOCK_PLACEHOLDER = "wirl-dev-mock";
+var MODELS_MOCK = "ai";
+var isModelsMock = (mock) => mock.hosts.length === 1 && mock.hosts[0] === AI_HOST;
 var MOCKS_EXAMPLE = 'It should look like: { "anthropic": "http://127.0.0.1:4010" }';
 async function readBounded2(path, limit) {
   let handle;
@@ -10745,7 +10987,8 @@ async function readLocalMocks(dir, manifest) {
   for (const [slug, value] of Object.entries(parsed)) {
     const name = JSON.stringify(slug);
     const declared = manifest.connections.find((each) => each.slug === slug);
-    if (declared === void 0) {
+    const forModels = declared === void 0 && slug === MODELS_MOCK;
+    if (declared === void 0 && !forModels) {
       throw new CliError(`${path} maps ${name}, and wirl.json declares no connection called that.`, "Each name in it is a connection wirl.json declares.");
     }
     if (typeof value !== "string") {
@@ -10766,6 +11009,10 @@ async function readLocalMocks(dir, manifest) {
     if (base.search !== "" || base.hash !== "") {
       throw new CliError(`${path}: the base URL for ${name} has a query or a fragment; a call's own path and query are added to it.`);
     }
+    if (declared === void 0) {
+      mocks.set(slug, { slug, hosts: [AI_HOST], base });
+      continue;
+    }
     const hosts = declared.hosts ?? [];
     if (hosts.length === 0) {
       throw new CliError(`${path} maps ${name}, which declares no hosts in wirl.json, so no call could go to its mock.`);
@@ -10836,6 +11083,111 @@ function routeToMocks(manifest, mocks, real, toMock) {
     return toMock(mockTarget(mock.base, url), init);
   };
 }
+function forwardedHeaders(incoming) {
+  const out2 = new Headers();
+  incoming.forEach((value, name) => {
+    const lower = name.toLowerCase();
+    if (NOT_FORWARDED.has(lower) || lower.startsWith("x-wirl-")) return;
+    out2.set(name, value);
+  });
+  return out2;
+}
+var NOT_FORWARDED = /* @__PURE__ */ new Set([
+  "authorization",
+  "proxy-authorization",
+  "cookie",
+  "host",
+  "connection",
+  "keep-alive",
+  "transfer-encoding",
+  "upgrade",
+  "te",
+  "trailer",
+  "content-length",
+  "accept-encoding"
+]);
+function passedOn(response) {
+  const headers = new Headers();
+  response.headers.forEach((value, name) => {
+    const lower = name.toLowerCase();
+    if (lower === "content-encoding" || lower === "content-length" || lower.startsWith("x-wirl-")) return;
+    headers.append(name, value);
+  });
+  return new Response(response.body, { status: response.status, statusText: response.statusText, headers });
+}
+function reasonOf3(error) {
+  const cause = error instanceof Error ? error.cause : void 0;
+  if (typeof cause?.code === "string") return cause.code;
+  return error instanceof Error ? error.message : String(error);
+}
+function localModels(ai, mock, log) {
+  if (ai === void 0 && mock === null) return void 0;
+  const credentials = ai?.credentials ?? null;
+  let org = null;
+  const orgOnce = () => {
+    org ??= (ai?.org ?? (async () => null))().catch((error) => {
+      org = null;
+      throw error;
+    });
+    return org;
+  };
+  return async (request, _caller, target, body) => {
+    const said = `wirl dev \xB7 ai.wirl ${request.method} ${target.pathname}`;
+    const headers = forwardedHeaders(request.headers);
+    const sent = body === null || request.method === "GET" || request.method === "HEAD" ? null : body;
+    if (mock !== null) {
+      let response2;
+      try {
+        response2 = await fetch(mockTarget(mock, target), { method: request.method, headers, body: sent, redirect: "manual", signal: request.signal });
+      } catch (error) {
+        if (request.signal.aborted) throw error;
+        log(`${said} \u2192 mock unreachable (${reasonOf3(error)})`);
+        return aiRefusal(502, "ai_vendor_unreachable", "The ai mock could not be reached.");
+      }
+      log(`${said} \u2192 mock ${response2.status}`);
+      return passedOn(response2);
+    }
+    if (credentials === null) {
+      log(`${said} \u2192 ai_no_key 402 (not signed in)`);
+      return aiRefusal(402, "ai_no_key", "Run `wirl login` to use models locally.");
+    }
+    let slug;
+    try {
+      slug = await orgOnce();
+    } catch (error) {
+      if (error instanceof CliError && (error.code === "unauthenticated" || error.code === "not_signed_in")) {
+        log(`${said} \u2192 ai_no_key 402 (login not accepted)`);
+        return aiRefusal(402, "ai_no_key", "Run `wirl login` to use models locally.");
+      }
+      log(`${said} \u2192 ai_vendor_unreachable 502 (whoami failed)`);
+      return aiRefusal(502, "ai_vendor_unreachable", "app.wirl.dev could not be reached to find your organisation.");
+    }
+    if (slug === null) {
+      log(`${said} \u2192 ai_no_key 402 (no org in wirl.json)`);
+      return aiRefusal(402, "ai_no_key", 'Add "org" to wirl.json to say which organisation local model calls count against.');
+    }
+    headers.set("authorization", `Bearer ${credentials.token}`);
+    headers.set("x-wirl-org", slug);
+    headers.set("x-wirl-client", "cli");
+    let response;
+    try {
+      response = await (credentials.fetchImpl ?? fetch)(`${credentials.apiOrigin}/ai/_${target.pathname}${target.search}`, {
+        method: request.method,
+        headers,
+        body: sent,
+        redirect: "manual",
+        signal: request.signal
+      });
+    } catch (error) {
+      if (request.signal.aborted) throw error;
+      log(`${said} \u2192 ai_vendor_unreachable 502 (${reasonOf3(error)})`);
+      return aiRefusal(502, "ai_vendor_unreachable", "app.wirl.dev could not be reached for this model call.");
+    }
+    const answer = restoreStatus(response);
+    log(`${said} \u2192 ${answer.status}`);
+    return passedOn(answer);
+  };
+}
 async function toRequest(incoming, outgoing, origin) {
   const left = new AbortController();
   outgoing.once("close", () => {
@@ -10905,7 +11257,10 @@ async function startLocalBroker(options) {
     heldBodyLimits: options.heldBodyLimits,
     heldAnswerLimits: options.heldAnswerLimits
   });
-  const mocks = options.mocks ?? /* @__PURE__ */ new Map();
+  const allMocks = options.mocks ?? /* @__PURE__ */ new Map();
+  const modelsMock = [...allMocks.values()].find(isModelsMock);
+  const mocks = new Map([...allMocks].filter(([, mock]) => !isModelsMock(mock)));
+  const models = localModels(options.ai, options.ai?.mock ?? modelsMock?.base ?? null, log);
   const fetchImpl = mocks.size === 0 ? transport.fetchImpl : routeToMocks(
     options.manifest,
     mocks,
@@ -10938,7 +11293,8 @@ async function startLocalBroker(options) {
         flows: async (request, _caller, target) => {
           log(`wirl dev \xB7 flows.wirl ${request.method} ${target.pathname} \u2192 no_flows 404`);
           return noFlowsAnswer();
-        }
+        },
+        ...models === void 0 ? {} : { ai: models }
       });
       await send2(response, outgoing);
     } catch (error) {
@@ -11025,7 +11381,21 @@ async function dev(dir, options = {}) {
   }
   const keys = await readLocalKeys(dir);
   const mocks = await readLocalMocks(dir, parsed.manifest);
-  const broker = await startLocalBroker({ manifest: parsed.manifest, dir, log, mocks });
+  const credentials = await loadCredentialsIfAny();
+  const manifestOrg = (await loadManifest(dir))?.org ?? null;
+  const org = async () => {
+    if (manifestOrg !== null) return manifestOrg;
+    if (credentials === null) return null;
+    try {
+      return chooseOrg((await whoami(credentials)).orgs, null);
+    } catch (error) {
+      if (error instanceof CliError && (error.code === "no_org" || error.code === "missing_argument")) return null;
+      throw error;
+    }
+  };
+  const broker = await startLocalBroker({ manifest: parsed.manifest, dir, log, mocks, ai: { credentials, org } });
+  const modelsMock = parsed.manifest.connections.some((each) => each.slug === MODELS_MOCK) ? void 0 : mocks.get(MODELS_MOCK);
+  if (modelsMock !== void 0) log(`mock ${MODELS_MOCK}: calls to ${modelsMock.hosts.join(", ")} go to ${modelsMock.base.href}, with no token`);
   for (const declared of parsed.manifest.connections) {
     log(keyLine(declared, keys));
     const misshapen = keyShapeWarning(declared, keys);
@@ -11475,7 +11845,7 @@ var Restarts = class {
 init_src();
 var GRACE_DAYS = String(RETENTION.deletedAppGraceDays);
 var DEV_RELOAD_NOTE = `The server module, and every file it imports, is rebuilt and restarted at the same address when one of them changes, with a line on stderr each time; the app's own write to a file does not count. While a change does not build, it tries again every second, and whenever you save a file in the project, until it builds, so a new file or a package installed counts. wirl.json, .wirl/mocks.json and migrations/ are read once, at start, when migrations/ is applied to .wirl/local.sqlite: stop this and run it again after changing any of them. A change to migrations/ is said once on stderr and restarts nothing. Files in a "static" folder are read fresh on every request.`;
-var DEV_KEYS_NOTE = `Keys come from .wirl/keys.json, in the shape this prints for each connection that has none. To try a connection without its key, map it to a server of your own in .wirl/mocks.json, like { "anthropic": "http://127.0.0.1:4010" }. A call to one of that connection's declared hosts then goes to that URL instead, its path added to the URL's own and its query kept. It carries the key from .wirl/keys.json, or, when that has none, the placeholder "wirl-dev-mock" in the shape of the connection's kind. With no key there, an http_header connection sends no key header, since only .wirl/keys.json names the header, and a none connection never sends one. A host the connection does not declare is refused as before. .wirl/mocks.json is read once, at start, and never uploaded.`;
+var DEV_KEYS_NOTE = `Keys come from .wirl/keys.json, in the shape this prints for each connection that has none. To try a connection without its key, map it to a server of your own in .wirl/mocks.json, like { "anthropic": "http://127.0.0.1:4010" }. A call to one of that connection's declared hosts then goes to that URL instead, its path added to the URL's own and its query kept. It carries the key from .wirl/keys.json, or, when that has none, the placeholder "wirl-dev-mock" in the shape of the connection's kind. With no key there, an http_header connection sends no key header, since only .wirl/keys.json names the header, and a none connection never sends one. A host the connection does not declare is refused as before. .wirl/mocks.json is read once, at start, and never uploaded. Model calls to https://ai.wirl go to your account's allowance on app.wirl.dev while you are signed in (wirl login); they count against the org in wirl.json.`;
 var DEV_FLAGS_NOTE = "A flag not listed below, other than --help, is refused, not ignored.";
 var DEV_TWO_PEOPLE_NOTE = "To try two people on one app, run wirl dev a second time in the same folder with another --user: the two share .wirl/local.sqlite, so each sees what the other writes.";
 var PREVIEW_LINK_MINUTES = String(VISIT_TOKEN_TTL_SECONDS / 60);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wirl",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "Deploy an internal app somewhere real, privately. One command; sharing by email; API keys declared, never pasted.",
   "keywords": [
     "deploy",