The AI endpoint is a file, and the file has no key in it

You ship a feature: POST /api/classify takes a support ticket and returns a category. On hoody-exec it's a file at that path with // @ai true at the top. generateObject is in scope. No import, no SDK, no key.

The helper reaches the gateway on your host with the container's own identity, so the script can be world-readable. Put it in the public repo, paste it into the docs, let a customer read the source of the endpoint they're calling: nothing in it authorizes anyone anywhere else. Swap the model with one @ai-model line; the credential story doesn't move.

Tokens draw from the AI Balance at the gateway's 5% markup. The server is flat-rate either way.

A public endpoint whose source is also public, with no secret in between.