@every-app/sdk 0.3.0-rc.1 → 0.3.0-rc.11

package/dist/internal/capabilities.js

@@ -16,15 +16,14 @@
  *    proxy's rules: inference routes only, the model allowlist, the usage
  *    tap. Never a capability: its key would reach the account's credits
  *    and keys on the same host.
- *  - `oauth_client`: a provider's OAuth client (a social network's), held
- *    the same way. The gateway completes the token endpoint calls only,
- *    putting the client on them; the app builds the authorize URL from the
- *    public client id (`integrationStatus()`), keeps the user tokens and
- *    calls the provider's API with them itself. A client shared by apps
- *    with different needs carries a `scopePolicy`: named scope sets an app
- *    lists in its manifest entry's `scopes`, which ./oauthScopes.ts turns
- *    into what the app may ask the provider for and what a token it is
- *    handed may carry.
+ *  - `oauth_client`: an OAuth provider (Google, Microsoft, Slack built
+ *    in; GitHub and others as presets, ./oauthPresets.ts) whose client the
+ *    gateway holds and whose flow it runs. A person connects in an app,
+ *    for exactly the provider scopes the app's manifest entry lists
+ *    (`scopes`); the gateway keeps the tokens and puts the person's token
+ *    on the app's calls to the provider's `api` hosts. Each provider is a
+ *    spec (./oauthSpec.ts), its differences data; ./oauthScopes.ts holds
+ *    the one set of scope rules.
  *  - `service`: something the gateway does itself, with no upstream host
  *    an app names (sending email, listing the organization's members). An
  *    app lists it the same way and calls its routes,
@@ -43,6 +42,23 @@ export const DEFAULT_WRITE_METHODS = [
     "PATCH",
     "DELETE",
 ];
+import { CATALOG_ENTRIES } from "./catalog/index.js";
+import { BUILT_IN_OAUTH_SPECS } from "./oauthBuiltIns.js";
+import { oauthCapabilityFromSpec } from "./oauthSpec.js";
+/**
+ * A built-in OAuth provider's catalog entry from its spec, its setting
+ * names kept literal so `CapabilitySecret` names them.
+ */
+function builtInOAuth(spec, setup) {
+    return {
+        ...oauthCapabilityFromSpec(spec),
+        secrets: {
+            clientId: spec.auth.clientId,
+            clientSecret: spec.auth.clientSecret,
+        },
+        setup,
+    };
+}
 export const CAPABILITIES = {
     // The AI providers, in the order the AI proxy's table had them.
     openai: {
@@ -69,6 +85,12 @@ export const CAPABILITIES = {
         // More than inference needs both the operator (AI_PROXY_EXTRA_ROUTES)
         // and the app's manifest (`ai.routes`): OpenAI paths only.
         extraRoutes: true,
+        // Tool calling on chat completions needs `reasoning_effort: "none"`
+        // on the GPT-6 family (the responses route takes tools as it is).
+        chat: { path: "/v1/chat/completions", seedModel: "gpt-6-luna" },
+        embeddings: { path: "/v1/embeddings", seedModel: "text-embedding-3-small" },
+        // AI Gateway's OpenAI endpoint takes the path without `/v1`.
+        aig: { slug: "openai", trim: "/v1" },
         hint: "A secret key from the API keys page; the Gateway puts it on every call as a bearer token.",
         verified: { on: "2026-10-25", how: "live" },
     },
@@ -89,7 +111,24 @@ export const CAPABILITIES = {
             "/api/v1/responses",
             "/api/v1/embeddings",
         ],
+        chat: {
+            path: "/api/v1/chat/completions",
+            seedModel: "anthropic/claude-haiku-5.5",
+        },
+        embeddings: {
+            path: "/api/v1/embeddings",
+            seedModel: "openai/text-embedding-3-small",
+        },
+        // AI Gateway's OpenRouter endpoint takes the path without `/api`.
+        aig: { slug: "openrouter", trim: "/api" },
         hint: "An API key from OpenRouter's keys page; the Gateway puts it on every call as a bearer token.",
+        // Every answer's `usage.cost` is the call's price in USD, what
+        // OpenRouter charges the key: read off the tail with the tokens.
+        cost: {
+            unit: "token",
+            responseField: "usage.cost",
+            note: "The answer's usage.cost is the call's price in USD, per model.",
+        },
         verified: { on: "2026-10-25", how: "live" },
     },
     // Workers AI's OpenAI-compatible REST API, in the gateway's own account
@@ -114,9 +153,55 @@ export const CAPABILITIES = {
             "/v1/responses",
         ],
         normalize: "workers-ai",
+        chat: {
+            path: "/v1/chat/completions",
+            seedModel: "@cf/meta/llama-4-scout-17b-16e-instruct",
+        },
+        embeddings: { path: "/v1/embeddings", seedModel: "@cf/baai/bge-m3" },
+        // Workers AI's REST API is AI Gateway's own host: the URL stays and
+        // `cf-aig-gateway-id` names the gateway.
+        aig: { slug: "workers-ai", header: true },
         hint: "A Cloudflare API token with Workers AI Read (the Workers AI page's prefilled token); the account is the Gateway's own.",
         verified: { on: "2026-10-25", how: "live" },
     },
+    // Cloudflare AI Gateway: a proxy in front of the other AI providers
+    // (logs, caching, rate limits, spend), with no models of its own. With
+    // AI_GATEWAY_ID set, every call to an `ai` entry that has an `aig` slug
+    // goes through it, the provider's own key still on the call; the
+    // gateway's own token is optional (an authenticated gateway requires
+    // it). Never listed under `providers`: it fronts the entries apps list.
+    "ai-gateway": {
+        mode: "ai",
+        kind: "proxy",
+        label: "Cloudflare AI Gateway",
+        description: "Cloudflare's proxy in front of the other AI providers: logs, caching, rate limits and spend, with each provider's own key.",
+        auth: {
+            kind: "header",
+            header: "cf-aig-authorization",
+            prefix: "Bearer ",
+            secret: "AI_GATEWAY_API_KEY",
+        },
+        authOptional: true,
+        docs: "https://dash.cloudflare.com/?to=/:account/ai/ai-gateway",
+        api: "https://developers.cloudflare.com/ai-gateway/",
+        setup: "setup/ai-gateway.md",
+        origin: "https://gateway.ai.cloudflare.com",
+        alsoNeeds: ["CLOUDFLARE_ACCOUNT_ID", "AI_GATEWAY_ID"],
+        basePath: "/v1/{CLOUDFLARE_ACCOUNT_ID}/{AI_GATEWAY_ID}",
+        inferenceRoutes: [],
+        hint: "The gateway's id from the AI Gateway page (everyapp ai gateway on makes one named everyapp); AI_GATEWAY_API_KEY only for an authenticated gateway, sent as cf-aig-authorization.",
+        secrets: [
+            {
+                name: "AI_GATEWAY_ID",
+                hint: "The AI Gateway's id (its name in the dashboard), in the Gateway's own Cloudflare account.",
+            },
+            {
+                name: "AI_GATEWAY_API_KEY",
+                hint: "An AI Gateway token with Run permission, only when the gateway is authenticated; leave unset for an open gateway.",
+            },
+        ],
+        verified: { on: "2026-10-25", how: "docs" },
+    },
     dataforseo: {
         mode: "api_key",
         label: "DataForSEO",
@@ -223,947 +308,14 @@ export const CAPABILITIES = {
         settings: [],
         optionalSettings: [],
     },
-    // Social networks' OAuth clients (docs/capabilities.md "OAuth clients"):
-    // the gateway completes their token endpoints only. Postiz connects its
-    // channels with them; one client serves every organization on the gateway.
-    linkedin: {
-        mode: "oauth_client",
-        label: "LinkedIn",
-        secrets: {
-            clientId: "LINKEDIN_CLIENT_ID",
-            clientSecret: "LINKEDIN_CLIENT_SECRET",
-        },
-        token: [
-            {
-                host: "www.linkedin.com",
-                path: "/oauth/v2/accessToken",
-                methods: ["POST"],
-                inject: "form",
-            },
-        ],
-        access: ["write"],
-        console: "https://www.linkedin.com/developers/apps",
-        authorize: {
-            url: "https://www.linkedin.com/oauth/v2/authorization",
-            scopes: [
-                "openid",
-                "profile",
-                "w_member_social",
-                "r_basicprofile",
-                "rw_organization_admin",
-                "w_organization_social",
-                "r_organization_social",
-            ],
-        },
-        api: ["api.linkedin.com"],
-        // Profiles and pages: both callbacks complete on the one client.
-        redirectPaths: [
-            "/integrations/social/linkedin",
-            "/integrations/social/linkedin-page",
-        ],
-    },
-    facebook: {
-        mode: "oauth_client",
-        label: "Facebook",
-        secrets: {
-            clientId: "FACEBOOK_APP_ID",
-            clientSecret: "FACEBOOK_APP_SECRET",
-        },
-        token: [
-            {
-                // The code exchange and the long-lived token exchange, both on a
-                // versioned path (/v25.0/oauth/access_token).
-                host: "graph.facebook.com",
-                path: /^\/v\d+\.\d+\/oauth\/access_token$/,
-                methods: ["GET", "POST"],
-                inject: "query",
-            },
-        ],
-        access: ["write"],
-        console: "https://developers.facebook.com/apps",
-        authorize: {
-            url: "https://www.facebook.com/v25.0/dialog/oauth",
-            // Facebook pages, and Instagram business accounts through them.
-            scopes: [
-                "pages_show_list",
-                "business_management",
-                "pages_manage_posts",
-                "pages_manage_engagement",
-                "pages_read_engagement",
-                "read_insights",
-                "instagram_basic",
-                "instagram_content_publish",
-                "instagram_manage_comments",
-                "instagram_manage_insights",
-            ],
-        },
-        api: ["graph.facebook.com", "graph.instagram.com"],
-        redirectPaths: [
-            "/integrations/social/facebook",
-            "/integrations/social/instagram",
-        ],
-    },
-    instagram: {
-        mode: "oauth_client",
-        label: "Instagram",
-        secrets: {
-            clientId: "INSTAGRAM_APP_ID",
-            clientSecret: "INSTAGRAM_APP_SECRET",
-        },
-        token: [
-            // The code exchange, then the long-lived token exchange.
-            {
-                host: "api.instagram.com",
-                path: "/oauth/access_token",
-                methods: ["POST"],
-                inject: "form",
-            },
-            {
-                host: "graph.instagram.com",
-                path: "/access_token",
-                methods: ["GET"],
-                inject: "query",
-            },
-        ],
-        access: ["write"],
-        console: "https://developers.facebook.com/apps",
-        authorize: {
-            url: "https://www.instagram.com/oauth/authorize",
-            scopes: [
-                "instagram_business_basic",
-                "instagram_business_content_publish",
-                "instagram_business_manage_comments",
-                "instagram_business_manage_insights",
-            ],
-        },
-        api: ["graph.instagram.com"],
-        redirectPaths: ["/integrations/social/instagram-standalone"],
-    },
-    threads: {
-        mode: "oauth_client",
-        label: "Threads",
-        secrets: { clientId: "THREADS_APP_ID", clientSecret: "THREADS_APP_SECRET" },
-        token: [
-            // The code exchange, then the long-lived token exchange.
-            {
-                host: "graph.threads.net",
-                path: "/oauth/access_token",
-                methods: ["GET", "POST"],
-                inject: "query",
-            },
-            {
-                host: "graph.threads.net",
-                path: "/access_token",
-                methods: ["GET"],
-                inject: "query",
-            },
-        ],
-        access: ["write"],
-        console: "https://developers.facebook.com/apps",
-        authorize: {
-            url: "https://threads.net/oauth/authorize",
-            scopes: [
-                "threads_basic",
-                "threads_content_publish",
-                "threads_manage_replies",
-                "threads_manage_insights",
-            ],
-        },
-        api: ["graph.threads.net"],
-        redirectPaths: ["/integrations/social/threads"],
-    },
-    youtube: {
-        mode: "oauth_client",
-        label: "YouTube",
-        secrets: {
-            clientId: "YOUTUBE_CLIENT_ID",
-            clientSecret: "YOUTUBE_CLIENT_SECRET",
-        },
-        token: [
-            {
-                host: "oauth2.googleapis.com",
-                path: "/token",
-                methods: ["POST"],
-                inject: "form",
-            },
-        ],
-        access: ["write"],
-        console: "https://console.cloud.google.com/apis/credentials",
-        setup: "setup/google.md",
-        authorize: {
-            url: "https://accounts.google.com/o/oauth2/v2/auth",
-            // YouTube channels, and Google Business Profiles on the same client.
-            scopes: [
-                "https://www.googleapis.com/auth/userinfo.profile",
-                "https://www.googleapis.com/auth/userinfo.email",
-                "https://www.googleapis.com/auth/youtube",
-                "https://www.googleapis.com/auth/youtube.force-ssl",
-                "https://www.googleapis.com/auth/youtube.readonly",
-                "https://www.googleapis.com/auth/youtube.upload",
-                "https://www.googleapis.com/auth/youtubepartner",
-                "https://www.googleapis.com/auth/yt-analytics.readonly",
-                "https://www.googleapis.com/auth/business.manage",
-            ],
-        },
-        api: [
-            "www.googleapis.com",
-            "youtubeanalytics.googleapis.com",
-            "mybusinessaccountmanagement.googleapis.com",
-            "mybusinessbusinessinformation.googleapis.com",
-            "mybusiness.googleapis.com",
-            "businessprofileperformance.googleapis.com",
-        ],
-        redirectPaths: ["/integrations/social/youtube", "/integrations/social/gmb"],
-    },
-    tiktok: {
-        mode: "oauth_client",
-        label: "TikTok",
-        secrets: {
-            clientId: "TIKTOK_CLIENT_ID",
-            clientSecret: "TIKTOK_CLIENT_SECRET",
-        },
-        token: [
-            {
-                host: "open.tiktokapis.com",
-                path: "/v2/oauth/token/",
-                methods: ["POST"],
-                inject: "form",
-                // TikTok calls the client id its client key.
-                params: { clientId: "client_key" },
-            },
-        ],
-        access: ["write"],
-        console: "https://developers.tiktok.com/apps",
-        authorize: {
-            url: "https://www.tiktok.com/v2/auth/authorize/",
-            scopes: [
-                "video.list",
-                "user.info.basic",
-                "video.publish",
-                "video.upload",
-                "user.info.profile",
-                "user.info.stats",
-            ],
-        },
-        api: ["open.tiktokapis.com"],
-        redirectPaths: ["/integrations/social/tiktok"],
-    },
-    "tiktok-business": {
-        mode: "oauth_client",
-        label: "TikTok Business",
-        secrets: {
-            clientId: "TIKTOK_BUSINESS_CLIENT_ID",
-            clientSecret: "TIKTOK_BUSINESS_CLIENT_SECRET",
-        },
-        token: [
-            {
-                host: "business-api.tiktok.com",
-                path: "/open_api/v1.3/tt_user/oauth2/token/",
-                methods: ["POST"],
-                inject: "json",
-            },
-            {
-                host: "business-api.tiktok.com",
-                path: "/open_api/v1.3/tt_user/oauth2/refresh_token/",
-                methods: ["POST"],
-                inject: "json",
-            },
-        ],
-        access: ["write"],
-        console: "https://business-api.tiktok.com/portal/apps",
-        authorize: {
-            url: "https://www.tiktok.com/v2/auth/authorize/",
-            scopes: [
-                "user.info.basic",
-                "user.info.username",
-                "user.info.stats",
-                "video.list",
-                "video.upload",
-                "video.publish",
-            ],
-        },
-        api: ["business-api.tiktok.com"],
-        // TikTok Business wants the trailing slash.
-        redirectPaths: ["/integrations/social/tiktok-business/"],
-    },
-    reddit: {
-        mode: "oauth_client",
-        label: "Reddit",
-        secrets: {
-            clientId: "REDDIT_CLIENT_ID",
-            clientSecret: "REDDIT_CLIENT_SECRET",
-        },
-        token: [
-            {
-                host: "www.reddit.com",
-                path: "/api/v1/access_token",
-                methods: ["POST"],
-                inject: "basic",
-            },
-        ],
-        access: ["write"],
-        console: "https://www.reddit.com/prefs/apps",
-        authorize: {
-            url: "https://www.reddit.com/api/v1/authorize",
-            scopes: ["read", "identity", "submit", "flair"],
-        },
-        api: ["oauth.reddit.com"],
-        redirectPaths: ["/integrations/social/reddit"],
-    },
-    pinterest: {
-        mode: "oauth_client",
-        label: "Pinterest",
-        secrets: {
-            clientId: "PINTEREST_CLIENT_ID",
-            clientSecret: "PINTEREST_CLIENT_SECRET",
-        },
-        token: [
-            {
-                host: "api.pinterest.com",
-                path: "/v5/oauth/token",
-                methods: ["POST"],
-                inject: "basic",
-            },
-        ],
-        access: ["write"],
-        console: "https://developers.pinterest.com/apps/",
-        authorize: {
-            url: "https://www.pinterest.com/oauth/",
-            scopes: [
-                "boards:read",
-                "boards:write",
-                "pins:read",
-                "pins:write",
-                "user_accounts:read",
-            ],
-        },
-        api: ["api.pinterest.com"],
-        redirectPaths: ["/integrations/social/pinterest"],
-    },
-    discord: {
-        mode: "oauth_client",
-        label: "Discord",
-        secrets: {
-            clientId: "DISCORD_CLIENT_ID",
-            clientSecret: "DISCORD_CLIENT_SECRET",
-        },
-        token: [
-            {
-                host: "discord.com",
-                path: "/api/oauth2/token",
-                methods: ["POST"],
-                inject: "basic",
-            },
-        ],
-        access: ["write"],
-        console: "https://discord.com/developers/applications",
-        // The server install; posting uses the bot's token, an app secret.
-        authorize: {
-            url: "https://discord.com/oauth2/authorize",
-            scopes: ["bot", "identify", "guilds"],
-        },
-        api: ["discord.com"],
-        redirectPaths: ["/integrations/social/discord"],
-    },
-    slack: {
-        mode: "oauth_client",
-        label: "Slack",
-        secrets: {
-            clientId: "SLACK_CLIENT_ID",
-            clientSecret: "SLACK_CLIENT_SECRET",
-        },
-        token: [
-            {
-                host: "slack.com",
-                path: "/api/oauth.v2.access",
-                methods: ["POST"],
-                inject: "form",
-            },
-        ],
-        access: ["write"],
-        console: "https://api.slack.com/apps",
-        setup: "setup/slack.md",
-        authorize: {
-            url: "https://slack.com/oauth/v2/authorize",
-            // The sets' union: the bot scopes in set order, then the one user
-            // scope no bot set carries. Postiz lists `channels.read`,
-            // `users.read`, `messages.write`, `channels.join` and `files.write`
-            // (it posts to channels it joins and uploads images); Open CRM adds
-            // `users.email`, `channels.manage` and `user-channels.manage` (its
-            // team agents match members to Slack users by email, create and
-            // manage the channels they post to, open DMs, and the installing
-            // person invites the bot to private channels).
-            scopes: [
-                "channels:read",
-                "groups:read",
-                "users:read",
-                "users:read.email",
-                "chat:write",
-                "chat:write.public",
-                "chat:write.customize",
-                "channels:join",
-                "channels:manage",
-                "groups:write",
-                "channels:write.invites",
-                "groups:write.invites",
-                "im:write",
-                "files:write",
-                "channels:write",
-            ],
-        },
-        scopePolicy: {
-            dialect: "slack",
-            // `oauth.v2.access` takes `code` with no `grant_type`; an app that
-            // opts into token rotation refreshes with `refresh_token`.
-            grantTypes: [null, "refresh_token"],
-            // Slack reads no `scope` on the token leg (the installation's scopes
-            // were fixed on the authorize URL), so the request goes as sent.
-            requestScope: "keep",
-            alwaysRequested: [],
-            tolerated: [],
-            deniedSegments: [],
-            // Slack authorizes by method name, not verb, and every method is one
-            // exact `/api/<method>` path on the host that also serves the token
-            // endpoint (which no set lists). A read set names its methods in
-            // `paths` (GET) and `posts` (POST) alike; a write set in `posts`
-            // only, with the one listing among them in `paths` too.
-            sets: {
-                "channels.read": {
-                    label: "Channels (read-only)",
-                    access: "read",
-                    scopes: ["channels:read", "groups:read"],
-                    routes: [
-                        {
-                            host: "slack.com",
-                            paths: [
-                                "/api/conversations.list",
-                                "/api/conversations.info",
-                                "/api/conversations.members",
-                                "/api/users.conversations",
-                            ],
-                            posts: [
-                                /^\/api\/conversations\.(list|info|members)$/,
-                                /^\/api\/users\.conversations$/,
-                            ],
-                        },
-                    ],
-                },
-                "users.read": {
-                    label: "Members (read-only)",
-                    access: "read",
-                    scopes: ["users:read"],
-                    routes: [
-                        {
-                            host: "slack.com",
-                            paths: [
-                                "/api/users.list",
-                                "/api/users.info",
-                                "/api/users.getPresence",
-                                "/api/bots.info",
-                            ],
-                            posts: [
-                                /^\/api\/users\.(list|info|getPresence)$/,
-                                /^\/api\/bots\.info$/,
-                            ],
-                        },
-                    ],
-                },
-                "users.email": {
-                    // Slack grants it only beside `users:read`: declare both sets.
-                    label: "Members' email addresses (read-only)",
-                    access: "read",
-                    scopes: ["users:read.email"],
-                    routes: [
-                        {
-                            host: "slack.com",
-                            paths: ["/api/users.lookupByEmail"],
-                            posts: [/^\/api\/users\.lookupByEmail$/],
-                        },
-                    ],
-                },
-                "messages.write": {
-                    label: "Messages (post as the app)",
-                    access: "write",
-                    scopes: ["chat:write", "chat:write.public", "chat:write.customize"],
-                    routes: [
-                        {
-                            host: "slack.com",
-                            // The scheduled-messages listing is the one read among them.
-                            paths: ["/api/chat.scheduledMessages.list"],
-                            posts: [
-                                /^\/api\/chat\.(postMessage|postEphemeral|update|delete|scheduleMessage|deleteScheduledMessage|scheduledMessages\.list)$/,
-                            ],
-                        },
-                    ],
-                },
-                "channels.join": {
-                    label: "Channels (join public ones)",
-                    access: "write",
-                    scopes: ["channels:join"],
-                    routes: [
-                        {
-                            host: "slack.com",
-                            paths: [],
-                            posts: [/^\/api\/conversations\.join$/],
-                        },
-                    ],
-                },
-                "channels.manage": {
-                    label: "Channels (create, manage and invite to; open DMs)",
-                    access: "write",
-                    scopes: [
-                        "channels:manage",
-                        "groups:write",
-                        "channels:write.invites",
-                        "groups:write.invites",
-                        "im:write",
-                    ],
-                    routes: [
-                        {
-                            host: "slack.com",
-                            paths: [],
-                            posts: [
-                                /^\/api\/conversations\.(create|rename|archive|unarchive|invite|open|kick|leave|setTopic|setPurpose|mark)$/,
-                            ],
-                        },
-                    ],
-                },
-                "files.write": {
-                    label: "Files (upload)",
-                    access: "write",
-                    scopes: ["files:write"],
-                    routes: [
-                        {
-                            host: "slack.com",
-                            paths: [],
-                            // The external upload flow; the retired `files.upload` stays off.
-                            posts: [
-                                /^\/api\/files\.(getUploadURLExternal|completeUploadExternal)$/,
-                            ],
-                        },
-                    ],
-                },
-                "user-channels.manage": {
-                    label: "Channels (as the installing person: read, manage, invite to)",
-                    access: "write",
-                    scopes: [],
-                    // Slack's `user_scope`: issued to the person's own token, which
-                    // Open CRM uses to invite the bot to private channels.
-                    userScopes: [
-                        "channels:read",
-                        "channels:write",
-                        "groups:read",
-                        "groups:write",
-                    ],
-                    routes: [
-                        {
-                            host: "slack.com",
-                            paths: [
-                                "/api/conversations.list",
-                                "/api/conversations.info",
-                                "/api/conversations.members",
-                                "/api/users.conversations",
-                            ],
-                            posts: [
-                                /^\/api\/conversations\.(list|info|members|create|rename|archive|unarchive|invite|kick|leave|setTopic|setPurpose|mark)$/,
-                                /^\/api\/users\.conversations$/,
-                            ],
-                        },
-                    ],
-                },
-            },
-        },
-        api: ["slack.com"],
-        redirectPaths: [
-            "/integrations/social/slack",
-            "/integrations/slack/callback",
-        ],
-    },
-    mastodon: {
-        mode: "oauth_client",
-        label: "Mastodon",
-        secrets: {
-            clientId: "MASTODON_CLIENT_ID",
-            clientSecret: "MASTODON_CLIENT_SECRET",
-        },
-        // On the instance the operator registered the client on.
-        token: [{ path: "/oauth/token", methods: ["POST"], inject: "form" }],
-        hostSetting: "MASTODON_URL",
-        defaultOrigin: "https://mastodon.social",
-        access: ["write"],
-        console: "/settings/applications",
-        authorize: {
-            url: "/oauth/authorize",
-            scopes: ["write:statuses", "profile", "write:media"],
-        },
-        api: [],
-        redirectPaths: ["/integrations/social/mastodon"],
-    },
-    kick: {
-        mode: "oauth_client",
-        label: "Kick",
-        secrets: { clientId: "KICK_CLIENT_ID", clientSecret: "KICK_CLIENT_SECRET" },
-        token: [
-            {
-                host: "id.kick.com",
-                path: "/oauth/token",
-                methods: ["POST"],
-                inject: "form",
-            },
-        ],
-        access: ["write"],
-        console: "https://kick.com/settings/developer",
-        authorize: {
-            url: "https://id.kick.com/oauth/authorize",
-            scopes: ["chat:write", "user:read", "channel:read"],
-        },
-        api: ["api.kick.com"],
-        redirectPaths: ["/integrations/social/kick"],
-    },
-    twitch: {
-        mode: "oauth_client",
-        label: "Twitch",
-        secrets: {
-            clientId: "TWITCH_CLIENT_ID",
-            clientSecret: "TWITCH_CLIENT_SECRET",
-        },
-        token: [
-            {
-                host: "id.twitch.tv",
-                path: "/oauth2/token",
-                methods: ["POST"],
-                inject: "form",
-            },
-        ],
-        access: ["write"],
-        console: "https://dev.twitch.tv/console/apps",
-        authorize: {
-            url: "https://id.twitch.tv/oauth2/authorize",
-            scopes: [
-                "user:write:chat",
-                "user:read:chat",
-                "moderator:manage:announcements",
-            ],
-        },
-        // Helix also wants the public client id, as Client-Id, on every call.
-        api: ["api.twitch.tv"],
-        redirectPaths: ["/integrations/social/twitch"],
-    },
-    tumblr: {
-        mode: "oauth_client",
-        label: "Tumblr",
-        secrets: {
-            clientId: "TUMBLR_CLIENT_ID",
-            clientSecret: "TUMBLR_CLIENT_SECRET",
-        },
-        token: [
-            {
-                host: "api.tumblr.com",
-                path: "/v2/oauth2/token",
-                methods: ["POST"],
-                inject: "form",
-            },
-        ],
-        access: ["write"],
-        console: "https://www.tumblr.com/oauth/apps",
-        authorize: {
-            url: "https://www.tumblr.com/oauth2/authorize",
-            scopes: ["write", "offline_access"],
-        },
-        api: ["api.tumblr.com"],
-        redirectPaths: ["/integrations/social/tumblr"],
-    },
-    dribbble: {
-        mode: "oauth_client",
-        label: "Dribbble",
-        secrets: {
-            clientId: "DRIBBBLE_CLIENT_ID",
-            clientSecret: "DRIBBBLE_CLIENT_SECRET",
-        },
-        token: [
-            {
-                // A POST that takes the client in its query string.
-                host: "dribbble.com",
-                path: "/oauth/token",
-                methods: ["POST"],
-                inject: "query",
-            },
-        ],
-        access: ["write"],
-        console: "https://dribbble.com/account/applications",
-        authorize: {
-            url: "https://dribbble.com/oauth/authorize",
-            scopes: ["public", "upload"],
-        },
-        api: ["api.dribbble.com"],
-        redirectPaths: ["/integrations/social/dribbble"],
-    },
-    // Clients several apps share with different needs, so each app lists the
-    // scope sets it uses: Open CRM reads a member's own mailbox and calendar
-    // (`gmail.read`, `calendar.read`; `identity`, `mail.read`), OpenSEO reads
-    // a site's Search Console and Analytics (`identity`, `search-console.read`,
-    // `analytics.read`). Every set is read-only. Google's is one Cloud project
-    // apart from YouTube's; Gmail's read scope is restricted and needs
-    // Google's verification, and whether Search Console and Analytics share
-    // that consent screen with it is the operator's choice when verifying.
-    "google-workspace": {
-        mode: "oauth_client",
-        label: "Google (Gmail, Calendar, Search Console and Analytics)",
-        secrets: {
-            clientId: "GOOGLE_WORKSPACE_CLIENT_ID",
-            clientSecret: "GOOGLE_WORKSPACE_CLIENT_SECRET",
-        },
-        token: [
-            {
-                host: "oauth2.googleapis.com",
-                path: "/token",
-                methods: ["POST"],
-                inject: "form",
-            },
-        ],
-        access: ["write"],
-        console: "https://console.cloud.google.com/apis/credentials",
-        setup: "setup/google.md",
-        authorize: {
-            url: "https://accounts.google.com/o/oauth2/v2/auth",
-            scopes: [
-                "openid",
-                "email",
-                "profile",
-                "https://www.googleapis.com/auth/gmail.readonly",
-                "https://www.googleapis.com/auth/calendar.readonly",
-                "https://www.googleapis.com/auth/webmasters.readonly",
-                "https://www.googleapis.com/auth/analytics.readonly",
-            ],
-        },
-        scopePolicy: {
-            dialect: "google",
-            // Google documents no scope on either token leg: the response's
-            // `scope` is where the gateway learns what a token holds.
-            grantTypes: ["authorization_code", "refresh_token"],
-            requestScope: "drop",
-            alwaysRequested: [],
-            // Both spellings: Google documents `email`/`profile` and the userinfo
-            // URLs as the same grants, and echoes the URLs.
-            tolerated: [
-                "openid",
-                "email",
-                "profile",
-                "https://www.googleapis.com/auth/userinfo.email",
-                "https://www.googleapis.com/auth/userinfo.profile",
-            ],
-            // Gmail's and Calendar's `/batch/<api>/<version>` carry whole requests
-            // inside; Analytics' measurement protocol secrets are readable under
-            // the read-only scope.
-            deniedSegments: ["batch", "measurementProtocolSecrets"],
-            sets: {
-                identity: {
-                    label: "Google account (who you are)",
-                    access: "read",
-                    scopes: ["openid", "email", "profile"],
-                    routes: [
-                        { host: "openidconnect.googleapis.com", paths: ["/v1/userinfo"] },
-                        {
-                            host: "www.googleapis.com",
-                            paths: [
-                                "/oauth2/v2/userinfo",
-                                "/oauth2/v3/userinfo",
-                                "/userinfo/v2/me",
-                            ],
-                        },
-                    ],
-                },
-                "gmail.read": {
-                    label: "Gmail (read-only)",
-                    access: "read",
-                    scopes: ["https://www.googleapis.com/auth/gmail.readonly"],
-                    routes: [
-                        {
-                            host: "gmail.googleapis.com",
-                            paths: ["/gmail/v1/users/"],
-                            // Push notifications start and stop; `messages/send`, drafts
-                            // and `modify` are the other POSTs under the same prefix.
-                            posts: [/^\/gmail\/v1\/users\/[^/]+\/(watch|stop)$/],
-                        },
-                    ],
-                },
-                "calendar.read": {
-                    label: "Google Calendar (read-only)",
-                    access: "read",
-                    scopes: ["https://www.googleapis.com/auth/calendar.readonly"],
-                    routes: [
-                        {
-                            host: "www.googleapis.com",
-                            paths: ["/calendar/v3/"],
-                            posts: [
-                                /^\/calendar\/v3\/freeBusy$/,
-                                /^\/calendar\/v3\/calendars\/[^/]+\/events\/watch$/,
-                                /^\/calendar\/v3\/users\/me\/calendarList\/watch$/,
-                                /^\/calendar\/v3\/channels\/stop$/,
-                            ],
-                        },
-                    ],
-                },
-                "search-console.read": {
-                    label: "Search Console (read-only)",
-                    access: "read",
-                    scopes: ["https://www.googleapis.com/auth/webmasters.readonly"],
-                    // The v3 paths answer on both hosts; URL inspection is v1 only.
-                    // A site is one segment, `https%3A%2F%2Fexample.com%2F` or
-                    // `sc-domain%3Aexample.com`, which is why routes match the raw path.
-                    routes: [
-                        {
-                            host: "www.googleapis.com",
-                            paths: ["/webmasters/v3/"],
-                            posts: [
-                                /^\/webmasters\/v3\/sites\/[^/]+\/searchAnalytics\/query$/,
-                            ],
-                        },
-                        {
-                            host: "searchconsole.googleapis.com",
-                            paths: ["/webmasters/v3/"],
-                            posts: [
-                                /^\/webmasters\/v3\/sites\/[^/]+\/searchAnalytics\/query$/,
-                                /^\/v1\/urlInspection\/index:inspect$/,
-                            ],
-                        },
-                    ],
-                },
-                "analytics.read": {
-                    label: "Google Analytics (read-only)",
-                    access: "read",
-                    scopes: ["https://www.googleapis.com/auth/analytics.readonly"],
-                    routes: [
-                        {
-                            // Reports are POSTed queries.
-                            host: "analyticsdata.googleapis.com",
-                            paths: ["/v1beta/properties/"],
-                            posts: [
-                                /^\/v1beta\/properties\/[^/]+:(runReport|batchRunReports|runPivotReport|batchRunPivotReports|runRealtimeReport|checkCompatibility)$/,
-                            ],
-                        },
-                        {
-                            // Reads only: accounts, properties and what hangs off them
-                            // (data streams, key events, enhanced measurement settings).
-                            host: "analyticsadmin.googleapis.com",
-                            paths: [
-                                "/v1beta/accountSummaries",
-                                "/v1beta/accounts",
-                                "/v1beta/accounts/",
-                                "/v1beta/properties",
-                                "/v1beta/properties/",
-                                "/v1alpha/properties/",
-                            ],
-                        },
-                    ],
-                },
-            },
-        },
-        api: [
-            "gmail.googleapis.com",
-            "www.googleapis.com",
-            "searchconsole.googleapis.com",
-            "analyticsdata.googleapis.com",
-            "analyticsadmin.googleapis.com",
-            "openidconnect.googleapis.com",
-        ],
-        redirectPaths: ["/integrations/google/callback"],
-    },
-    "microsoft-365": {
-        mode: "oauth_client",
-        label: "Microsoft 365 (Outlook mail and calendar)",
-        secrets: {
-            clientId: "MICROSOFT_365_CLIENT_ID",
-            clientSecret: "MICROSOFT_365_CLIENT_SECRET",
-        },
-        token: [
-            {
-                // The multi-tenant endpoint: register the client for accounts in
-                // any organization and personal accounts. A single-tenant client
-                // answers only on its tenant's path, which this does not complete.
-                host: "login.microsoftonline.com",
-                path: "/common/oauth2/v2.0/token",
-                methods: ["POST"],
-                inject: "form",
-            },
-        ],
-        access: ["write"],
-        console: "https://entra.microsoft.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade",
-        setup: "setup/microsoft-365.md",
-        authorize: {
-            url: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
-            scopes: ["offline_access", "User.Read", "Mail.Read", "Calendars.Read"],
-        },
-        scopePolicy: {
-            dialect: "microsoft",
-            grantTypes: ["authorization_code", "refresh_token"],
-            // The token leg's `scope` is Microsoft's extension for naming the
-            // resource; the gateway sets it to the app's list so a token covers
-            // Graph alone.
-            requestScope: "replace",
-            // Refresh tokens; Entra never echoes it in a response's `scope`.
-            alwaysRequested: ["offline_access"],
-            // Compared case-insensitively, as Microsoft spells them both ways.
-            tolerated: ["openid", "profile", "email", "offline_access", "User.Read"],
-            // `$batch` carries whole requests inside; `beta` is another API.
-            deniedSegments: ["$batch", "beta"],
-            // `/v1.0/me/…` only: `/v1.0/users/<id>/…` reaches shared mailboxes
-            // and calendars under the same permissions.
-            sets: {
-                identity: {
-                    label: "Microsoft account (who you are)",
-                    access: "read",
-                    scopes: ["User.Read"],
-                    routes: [
-                        {
-                            host: "graph.microsoft.com",
-                            paths: ["/v1.0/me", "/oidc/userinfo"],
-                        },
-                    ],
-                },
-                "mail.read": {
-                    label: "Outlook mail (read-only)",
-                    access: "read",
-                    scopes: ["Mail.Read"],
-                    routes: [
-                        {
-                            host: "graph.microsoft.com",
-                            paths: [
-                                "/v1.0/me/messages",
-                                "/v1.0/me/messages/",
-                                "/v1.0/me/mailFolders",
-                                "/v1.0/me/mailFolders/",
-                            ],
-                        },
-                    ],
-                },
-                "calendar.read": {
-                    label: "Outlook calendar (read-only)",
-                    access: "read",
-                    scopes: ["Calendars.Read"],
-                    routes: [
-                        {
-                            host: "graph.microsoft.com",
-                            paths: [
-                                "/v1.0/me/calendar",
-                                "/v1.0/me/calendar/",
-                                "/v1.0/me/calendars",
-                                "/v1.0/me/calendars/",
-                                "/v1.0/me/events",
-                                "/v1.0/me/events/",
-                                "/v1.0/me/calendarView",
-                                "/v1.0/me/calendarView/",
-                            ],
-                            // Free/busy is a POSTed query.
-                            posts: [/^\/v1\.0\/me\/calendar\/getSchedule$/],
-                        },
-                    ],
-                },
-            },
-        },
-        api: ["graph.microsoft.com"],
-        redirectPaths: ["/integrations/microsoft/callback"],
-    },
+    // The OAuth providers every Gateway has built in, from their JSON specs
+    // (./oauthBuiltIns.ts): what differs between them is data there.
+    slack: builtInOAuth(BUILT_IN_OAUTH_SPECS.slack, "setup/slack.md"),
+    "google-workspace": builtInOAuth(BUILT_IN_OAUTH_SPECS["google-workspace"], "setup/google.md"),
+    "microsoft-365": builtInOAuth(BUILT_IN_OAUTH_SPECS["microsoft-365"], "setup/microsoft-365.md"),
+    // The first fifty beyond the entries above (catalog/*.ts, PR 3 of the
+    // provider registry), after them so the derived lists keep their order.
+    ...CATALOG_ENTRIES,
 };
 /** The Gateway settings an API-key or AI provider's `auth` names: the key first, then a Basic username held as a setting. */
 export function authSettingNames(auth) {
@@ -1184,7 +336,12 @@ export function capabilitySettings(capability) {
                 ...(capability.hostSetting ? [capability.hostSetting] : []),
             ];
         case "ai":
-            return [capability.auth.secret, ...(capability.alsoNeeds ?? [])];
+            // Every setting `auth` names, as for an API-key provider: a Basic
+            // username held as a setting is checked, bound and listed like the key.
+            return [
+                ...authSettingNames(capability.auth),
+                ...(capability.alsoNeeds ?? []),
+            ];
         case "service":
             return [...capability.settings, ...capability.optionalSettings];
         case "oauth_client":
@@ -1193,7 +350,6 @@ export function capabilitySettings(capability) {
                 ...(capability.secrets.clientSecret
                     ? [capability.secrets.clientSecret]
                     : []),
-                ...(capability.hostSetting ? [capability.hostSetting] : []),
             ];
     }
 }
@@ -1218,7 +374,13 @@ export function capabilityIdsOf(lookup) {
  * to encode, or taken as already encoded when it holds no colon.
  */
 export function authorizationFor(capability, settings) {
-    return authorizationOf(capability.auth, settings);
+    // Only the settings the entry declares are visible: whatever `auth` reads
+    // beyond them (a setting no row check saw) is unset, and the call fails closed.
+    const declared = {};
+    for (const name of capabilitySettings(capability)) {
+        declared[name] = settings[name];
+    }
+    return authorizationOf(capability.auth, declared);
 }
 /** {@link authorizationFor} for an `auth` block alone (the SDK's AI fallback holds the block, not the entry). */
 export function authorizationOf(auth, settings) {
@@ -1313,10 +475,9 @@ export function serviceRoutePath(id, route) {
 /**
  * The capability call an AppGateway path names, or null when the path names
  * an unknown capability (or an AI provider, which has its own route), a
- * host outside the provider's, a path that could leave that host, a path
- * that isn't one of an OAuth client's token endpoints, or a route a service
- * capability doesn't declare. `settings` resolves an OAuth client's
- * `hostSetting` (Mastodon's instance); `lookup` is where the id is found,
+ * host outside the provider's, a path that could leave that host, or a
+ * route a service capability doesn't declare. `settings` resolves an API-key provider's
+ * `hostSetting` (a Shopify store's host); `lookup` is where the id is found,
  * the catalog alone by default.
  */
 export function parseIntegrationProxyPath(pathname, search, settings, lookup = CATALOG) {
@@ -1340,13 +501,12 @@ export function parseIntegrationProxyPath(pathname, search, settings, lookup = C
         };
     }
     if (capability.mode === "oauth_client") {
-        const upstream = oauthClientHosts(capability, settings).includes(host)
+        const upstream = capability.api.includes(host)
             ? httpsUpstream(host, path ?? "/", search)
             : null;
-        const endpoint = upstream && tokenEndpointFor(capability, upstream, settings);
-        if (!upstream || !endpoint)
+        if (!upstream)
             return null;
-        return { kind: "oauth_client", id, capability, upstream, endpoint };
+        return { kind: "oauth_client", id, capability, upstream };
     }
     if (capability.mode !== "api_key")
         return null;
@@ -1367,81 +527,9 @@ function httpsUpstream(host, path, search) {
         return null;
     return upstream;
 }
-/**
- * The origin an OAuth client's `hostSetting` names (its default when the
- * setting is unset), or null for a client with a fixed host or a setting
- * that isn't an https origin. A bare host is taken as https.
- */
-export function oauthClientOrigin(capability, settings) {
-    if (!capability.hostSetting)
-        return null;
-    const set = settings?.[capability.hostSetting];
-    const value = typeof set === "string" && set.trim()
-        ? set.trim()
-        : capability.defaultOrigin;
-    if (!value)
-        return null;
-    let url;
-    try {
-        url = new URL(/^[a-z][a-z0-9+.-]*:\/\//i.test(value) ? value : `https://${value}`);
-    }
-    catch {
-        return null;
-    }
-    // An origin and nothing else: the paths are the provider's own.
-    const bare = url.pathname === "/" &&
-        !url.search &&
-        !url.hash &&
-        !url.username &&
-        !url.password;
-    return url.protocol === "https:" && bare ? url.origin : null;
-}
-/** The host an OAuth client's `hostSetting` names, or null. */
-function settingHost(capability, settings) {
-    const origin = oauthClientOrigin(capability, settings);
-    return origin ? new URL(origin).host : null;
-}
-/** The hosts an OAuth client's token endpoints are on. */
-function oauthClientHosts(capability, settings) {
-    const fromSetting = settingHost(capability, settings);
-    return [
-        ...new Set(capability.token.flatMap(({ host }) => {
-            const resolved = host ?? fromSetting;
-            return resolved ? [resolved] : [];
-        })),
-    ];
-}
-/**
- * The token endpoint `upstream` is, by its exact host and path (a RegExp
- * for a versioned one), or null. Its method is the caller's to check.
- */
-export function tokenEndpointFor(capability, upstream, settings) {
-    if (upstream.protocol !== "https:")
-        return null;
-    const fromSetting = settingHost(capability, settings);
-    return (capability.token.find(({ host, path }) => (host ?? fromSetting) === upstream.host &&
-        (typeof path === "string"
-            ? path === upstream.pathname
-            : path.test(upstream.pathname))) ?? null);
-}
-/** An OAuth client's token endpoints, as `POST https://host/path` lines for messages. */
-export function describeTokenEndpoints(capability) {
-    return capability.token
-        .map(({ host, path, methods }) => `${methods.join("/")} https://${host ?? `<${capability.hostSetting}>`}${tokenPathText(path)}`)
-        .join(", ");
-}
-/** A token endpoint's path as people read it: a versioned one as `/v<version>/oauth/access_token`. */
-export function tokenPathText(path) {
-    if (typeof path === "string")
-        return path;
-    return path.source
-        .replace(/^\^|\$$/g, "")
-        .replace(/v\\d\+\\\.\\d\+/g, "v<version>")
-        .replace(/\\(.)/g, "$1");
-}
 /**
  * The command that gives the gateway `capability`'s client:
- * `pnpm everyapp secret set <ID> <SECRET> [<HOST SETTING>]`.
+ * `pnpm everyapp secret set <ID> <SECRET>`.
  */
 export function oauthClientSecretSetCommand(capability) {
     return `pnpm everyapp secret set ${capabilitySettings(capability).join(" ")}`;