@every-app/sdk 0.3.0-rc.1 → 0.3.0-rc.11

package/dist/internal/events.js

@@ -24,29 +24,58 @@ export const EVENT_TYPES = [
     entry("member", "member.reactivated", "A member was reactivated"),
     entry("member", "member.removed", "A member was removed"),
     entry("member", "member.password_reset", "A member reset their password"),
+    entry("member", "member.invitation_cancelled", "A pending invitation was cancelled"),
+    entry("organization", "organization.renamed", "The workspace was renamed"),
+    entry("organization", "organization.linked_dev_changed", "Linked dev (everyapp dev against this Gateway) was turned on or off"),
     entry("app", "app.installed", "An app was installed on the Gateway"),
     entry("app", "app.updated", "An app was redeployed"),
+    entry("app", "app.live", "An app went live on the Gateway"),
     entry("app", "app.removed", "An app was removed from the Gateway"),
     entry("app", "app.needs_setup", "An app needs a setting before it opens"),
     entry("app", "app.ready", "An app has every setting it needs"),
     entry("app", "app.paused_cap", "An app is paused: its monthly cap is reached"),
     entry("app", "app.tools_changed", "An app's AI tools changed"),
+    entry("app", "app.renamed", "An app's name or description changed"),
+    entry("app", "app.settings_changed", "An app's settings were set or unset (names only)"),
+    entry("app", "app.access_changed", "Who can open an app changed"),
+    entry("app", "app.email_changed", "An app's email senders or inbound changed"),
     entry("cap", "cap.warning", "An app is at 80% of its monthly cap"),
     entry("cap", "cap.reached", "An app reached its monthly cap"),
     entry("cap", "cap.raised", "An app's monthly cap, or the workspace default, was raised or removed"),
+    entry("cap", "cap.changed", "An app's monthly cap, or the workspace default, was set or lowered"),
+    entry("group", "group.created", "A group was created"),
+    entry("group", "group.updated", "A group was renamed or described"),
+    entry("group", "group.removed", "A group was removed"),
+    entry("group", "group.members_changed", "A group's members changed"),
+    entry("group", "group.apps_changed", "The apps a group opens changed"),
     entry("tool", "tool.blocked", "An AI client's tool call was blocked"),
     entry("tool", "tool.error", "An AI client's tool call failed"),
     entry("connection", "connection.created", "An AI app was connected"),
     entry("connection", "connection.revoked", "An AI app connection was revoked"),
+    entry("connection", "connection.used", "Linked dev used the Gateway's services, or an app used a member's OAuth connection (first call of the day)"),
     entry("token", "token.created", "A personal access token was created"),
     entry("token", "token.revoked", "A personal access token was revoked"),
     entry("access", "access.changed", "Cloudflare Access was turned on or off"),
+    entry("signin_provider", "signin_provider.added", "A sign-in provider (Continue with Google, …) was turned on"),
+    entry("signin_provider", "signin_provider.removed", "A sign-in provider was turned off"),
     entry("mcp_app", "mcp_app.added", "An MCP app was added"),
     entry("mcp_app", "mcp_app.removed", "An MCP app was removed"),
     entry("mcp_app", "mcp_app.enabled", "An MCP app is being served again"),
     entry("mcp_app", "mcp_app.disabled", "An MCP app stopped being served"),
-    entry("provider", "provider.added", "An API provider was registered"),
-    entry("provider", "provider.removed", "An API provider was removed"),
+    entry("mcp_app", "mcp_app.updated", "An MCP app's risk default, name or description changed"),
+    entry("mcp_app", "mcp_app.tool_changed", "One tool of an MCP app was overridden: its risk, or on/off"),
+    entry("provider", "provider.added", "A provider was registered"),
+    entry("provider", "provider.removed", "A provider was removed"),
+    entry("provider", "provider.updated", "A provider's spec or OAuth client was replaced"),
+    entry("provider", "provider.connected", "Someone connected an account at an OAuth provider in an app"),
+    entry("provider", "provider.disconnected", "An OAuth provider account was disconnected"),
+    entry("provider", "provider.connection_expired", "An OAuth provider refused to refresh a connection; it needs reconnecting"),
+    entry("subscription", "subscription.created", "An event subscription was added"),
+    entry("subscription", "subscription.updated", "An event subscription was changed, paused or resumed"),
+    entry("subscription", "subscription.removed", "An event subscription was removed"),
+    entry("subscription", "subscription.redelivered", "A delivery was queued again by hand"),
+    entry("ai", "ai.default_changed", "The default model provider changed"),
+    entry("ai", "ai.model_changed", "A provider's default model changed"),
     entry("ping", "ping", "A test event, sent to one subscription on request"),
 ];
 const typesByName = new Map(EVENT_TYPES.map((info) => [info.type, info]));
@@ -99,8 +128,19 @@ export const EVENT_SUBSCRIPTIONS_MAX = 25;
 /** A webhook signing secret's length. */
 export const EVENT_SECRET_MIN_LENGTH = 16;
 export const EVENT_SECRET_MAX_LENGTH = 128;
-/** Events and deliveries are kept this long. */
+/**
+ * Deliveries (the queue and its log) are kept this long. Events themselves
+ * are the audit log and live longer ({@link AUDIT_RETENTION_DAYS}).
+ */
 export const EVENT_RETENTION_DAYS = 30;
+/**
+ * Events are kept this long: Admin → Activity → Audit, `everyapp workspace
+ * audit` and `everyapp_workspace_audit` read them back. A constant, not a
+ * setting.
+ */
+export const AUDIT_RETENTION_DAYS = 90;
+/** The most audit rows one page carries, on every surface. */
+export const AUDIT_PAGE_MAX = 200;
 /** A subscription's URL. */
 export const EVENT_URL_MAX_LENGTH = 2048;
 /** A subscription's name. */
@@ -163,17 +203,82 @@ export function isPrivateEventTargetName(host) {
     return EVENT_PRIVATE_NAME_SUFFIXES.some((suffix) => host === suffix || host.endsWith(`.${suffix}`));
 }
 /** The sinks a subscription delivers to. */
-export const EVENT_SINKS = ["webhook", "email"];
+export const EVENT_SINKS = ["webhook", "email", "app"];
 /** Whom the email sink mails: the organization's owners, or owners and admins. */
 export const EVENT_EMAIL_RECIPIENTS = ["owners", "admins"];
+/**
+ * The `app` sink (docs/design/2026-11-birds-decisions/app-event-sink.md):
+ * an app declares `events: { subscribe, why }` in its manifest, the deploy
+ * makes the subscription for the app's own organization, and the Gateway
+ * delivers over the app's service binding to {@link APP_EVENTS_PATH} with a
+ * system token of purpose `events.deliver`.
+ *
+ * Which events may reach an app is an **allowlist** of families, not a
+ * deny-list: a family added to the catalogue later reaches no app until it
+ * is added here on purpose. `token.*`, `subscription.*`, `provider.*`,
+ * `signin_provider.*`, `cap.*`, `ai.*`, `access.*` and `organization.*` are
+ * not on it, and `member.password_reset` is left out of `member.*`.
+ */
+export const APP_EVENTS_PATH = "/__everyapp/events";
+export const APP_SINK_EVENT_FAMILIES = [
+    "member",
+    "group",
+    "app",
+    "mcp_app",
+    "connection",
+    "tool",
+];
+/** Types of an allowed family that still never reach an app. */
+export const APP_SINK_EXCLUDED_TYPES = [
+    "member.password_reset",
+];
+/** The most patterns one app's `events.subscribe` may list. */
+export const APP_SINK_PATTERNS_MAX = 25;
+/** The family a type or pattern belongs to: its first segment. */
+function familyOf(typeOrPattern) {
+    const dot = typeOrPattern.indexOf(".");
+    return dot === -1 ? typeOrPattern : typeOrPattern.slice(0, dot);
+}
+/**
+ * Whether an event of this type may be delivered to an app at all: its
+ * family is on the allowlist and the type isn't excluded. Checked when the
+ * bus queues a delivery and again before each attempt, whatever the
+ * subscription's stored patterns say.
+ */
+export function appSinkTypeAllowed(type) {
+    if (APP_SINK_EXCLUDED_TYPES.includes(type))
+        return false;
+    return APP_SINK_EVENT_FAMILIES.includes(familyOf(type));
+}
+/**
+ * What is wrong with a pattern an app's manifest subscribes to, or null: a
+ * well-formed pattern ({@link eventPatternProblem}) inside an allowed
+ * family. `*` and any pattern outside the families are refused at deploy.
+ */
+export function appSinkPatternProblem(pattern) {
+    const problem = eventPatternProblem(pattern);
+    if (problem)
+        return problem;
+    if (APP_SINK_EXCLUDED_TYPES.includes(pattern)) {
+        return `"${pattern}" never reaches an app`;
+    }
+    if (pattern === "*" ||
+        !APP_SINK_EVENT_FAMILIES.includes(familyOf(pattern))) {
+        return `"${pattern}" can't reach an app: an app subscribes to ${APP_SINK_EVENT_FAMILIES.map((family) => `${family}.*`).join(", ")} (member.password_reset excepted)`;
+    }
+    return null;
+}
 /**
  * A subscription pattern: `*` (everything but ping), an exact type, or a
  * prefix with `.*` (`member.*`, `app.*`, `app.crm.*`). `app.*` matches the
  * gateway's app events and every app's own.
  */
 export function eventPatternMatches(pattern, type) {
+    // Everything but a test ping and the bus's own housekeeping: a webhook
+    // hears about subscriptions only when it names `subscription.*`, so a
+    // catch-all's first delivery is the event it was made for, not itself.
     if (pattern === "*")
-        return type !== "ping";
+        return type !== "ping" && !type.startsWith("subscription.");
     if (pattern.endsWith(".*")) {
         return type.startsWith(pattern.slice(0, -1));
     }

package/dist/internal/gatewaySettings.d.ts

@@ -24,7 +24,8 @@ export declare const GATEWAY_OWN_SETTINGS: readonly ["AI_PROXY_EXTRA_ROUTES", "E
 export type SettableGatewaySetting = Exclude<CapabilitySecret, (typeof INSTALL_OWNED_GATEWAY_SETTINGS)[number]> | (typeof GATEWAY_OWN_SETTINGS)[number];
 /**
  * The Gateway's optional settings `everyapp secret set` changes: every
- * setting a catalog provider reads, then the Gateway's own.
+ * setting a catalog provider reads, the Gateway's own, then the sign-in
+ * providers' (`<ID>_SIGNIN_<FIELD>`, ./signInProviders.ts).
  */
 export declare const SETTABLE_GATEWAY_SETTINGS: readonly SettableGatewaySetting[];
 /**
@@ -51,7 +52,7 @@ export declare function isSettableGatewaySetting(name: string): boolean;
  * are typed and check their shape; anything else is a credential and
  * stays hidden.
  */
-export declare const PLAIN_GATEWAY_SETTINGS: readonly ["EMAIL_FROM", "EMAIL_FROM_NAME", "EMAIL_PROVIDER", "EMAIL_PASSWORD_SIGN_IN", "MASTODON_URL", "AI_PROXY_EXTRA_ROUTES", "MCP_OAUTH_ENABLED", "MCP_DCR_ENABLED", "MCP_ALLOWED_ORIGINS", "MCP_AUDIT_RETENTION_DAYS", "CLOUDFLARE_ACCESS_OIDC_ISSUER", "CLOUDFLARE_ACCESS_OIDC_CLIENT_ID", "CLOUDFLARE_ACCESS_OIDC_LABEL", "CLOUDFLARE_ACCESS_TEAM_DOMAIN", "CLOUDFLARE_ACCESS_AUD", "CLOUDFLARE_ACCESS_APPS_AUD", "CLOUDFLARE_ACCESS_AUTO_JOIN_DOMAINS", "CLOUDFLARE_ACCESS_OUTER_RING_AUTO_JOIN", "HOSTED_OPEN_SIGNUP", "BROWSER_APP_INSTALLS", "DISPATCH_NAMESPACE", "THIRD_PARTY_DOMAIN", "EVENTS_ALLOW_PRIVATE_TARGETS"];
+export declare const PLAIN_GATEWAY_SETTINGS: readonly ["EMAIL_FROM", "EMAIL_FROM_NAME", "EMAIL_PROVIDER", "EMAIL_PASSWORD_SIGN_IN", "AI_PROXY_EXTRA_ROUTES", "MCP_OAUTH_ENABLED", "MCP_DCR_ENABLED", "MCP_ALLOWED_ORIGINS", "MCP_AUDIT_RETENTION_DAYS", "CLOUDFLARE_ACCESS_OIDC_ISSUER", "CLOUDFLARE_ACCESS_OIDC_CLIENT_ID", "CLOUDFLARE_ACCESS_OIDC_LABEL", "CLOUDFLARE_ACCESS_TEAM_DOMAIN", "CLOUDFLARE_ACCESS_AUD", "CLOUDFLARE_ACCESS_APPS_AUD", "CLOUDFLARE_ACCESS_AUTO_JOIN_DOMAINS", "CLOUDFLARE_ACCESS_OUTER_RING_AUTO_JOIN", "HOSTED_OPEN_SIGNUP", "BROWSER_APP_INSTALLS", "DISPATCH_NAMESPACE", "THIRD_PARTY_DOMAIN", "EVENTS_ALLOW_PRIVATE_TARGETS"];
 /** Whether a settable Gateway setting's value is a plain value, not a credential. */
 export declare function isPlainGatewaySetting(name: string): boolean;
 /**

package/dist/internal/gatewaySettings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gatewaySettings.d.ts","sourceRoot":"","sources":["../../src/internal/gatewaySettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,mLASjC,CAAC;AAMX,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElE;AAoBD,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,yrBAkCvB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAC9B,OAAO,CAAC,gBAAgB,EAAE,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,GAC1E,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,sBAAsB,EAGtE,CAAC;AAIF;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,QAAgC,CAAC;AAEvE,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,omBAwBmB,CAAC;AAIvD,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,6EAIa,CAAC;AAIvD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,iGAAiG;AACjG,eAAO,MAAM,yBAAyB,yDAI5B,CAAC;AAEX,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAmBD,iDAAiD;AACjD,eAAO,MAAM,8BAA8B,sFAC0C,CAAC;AAEtF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAM7D;AAED,4EAA4E;AAC5E,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAQ5E"}
+{"version":3,"file":"gatewaySettings.d.ts","sourceRoot":"","sources":["../../src/internal/gatewaySettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAM3B;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,mLASjC,CAAC;AAMX,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElE;AAmBD,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,yrBAkCvB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAC9B,OAAO,CAAC,gBAAgB,EAAE,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,GAC1E,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1C;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,sBAAsB,EAItE,CAAC;AAIF;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,QAAgC,CAAC;AAEvE,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,olBAuBmB,CAAC;AASvD,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,6EAIa,CAAC;AAIvD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,iGAAiG;AACjG,eAAO,MAAM,yBAAyB,yDAI5B,CAAC;AAEX,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAmBD,iDAAiD;AACjD,eAAO,MAAM,8BAA8B,sFAC0C,CAAC;AAEtF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAM7D;AAED,4EAA4E;AAC5E,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAQ5E"}

package/dist/internal/gatewaySettings.js

@@ -11,6 +11,7 @@
  * declaring every settable one.
  */
 import { CAPABILITIES, CAPABILITY_IDS, capabilitySettings, } from "./capabilities.js";
+import { PLAIN_SIGN_IN_SETTINGS, SIGN_IN_GATEWAY_SETTINGS, } from "./signInProviders.js";
 /**
  * The Gateway's own settings: the install writes them once (`everyapp
  * setup`), or an operator by hand (THIRD_PARTY_DEPLOYS), and `everyapp
@@ -33,8 +34,7 @@ export function isInstallOwnedGatewaySetting(name) {
 }
 /**
  * The settings the catalog's providers read (the AI providers' keys, the
- * API-key providers' keys, the OAuth clients and the Mastodon instance's
- * URL), in catalog order, the install's own left out: what `everyapp
+ * API-key providers' keys and hosts, the OAuth clients), in catalog order, the install's own left out: what `everyapp
  * secret set` accepts because a provider reads it. A gateway's registered
  * rows add theirs at run time (providerRegistry.settingNames()).
  */
@@ -75,7 +75,7 @@ export const GATEWAY_OWN_SETTINGS = [
     // gate, THIRD_PARTY_DEPLOYS, is never set from here: it is opened by
     // hand once the launch checks pass (docs/runbooks/hosted-install.md).
     "CF_DEPLOY_TOKEN",
-    // Self-hosted browser installs are on by default; "off" opts out.
+    // Self-hosted Gateway app installs: off unless exactly "on" (everyapp deploy-token add).
     "BROWSER_APP_INSTALLS",
     "DISPATCH_NAMESPACE",
     "THIRD_PARTY_DOMAIN",
@@ -84,11 +84,13 @@ export const GATEWAY_OWN_SETTINGS = [
 ];
 /**
  * The Gateway's optional settings `everyapp secret set` changes: every
- * setting a catalog provider reads, then the Gateway's own.
+ * setting a catalog provider reads, the Gateway's own, then the sign-in
+ * providers' (`<ID>_SIGNIN_<FIELD>`, ./signInProviders.ts).
  */
 export const SETTABLE_GATEWAY_SETTINGS = [
     ...PROVIDER_GATEWAY_SETTINGS,
     ...GATEWAY_OWN_SETTINGS,
+    ...SIGN_IN_GATEWAY_SETTINGS,
 ];
 const SETTABLE = new Set(SETTABLE_GATEWAY_SETTINGS);
 /**
@@ -124,7 +126,6 @@ export const PLAIN_GATEWAY_SETTINGS = [
     "EMAIL_FROM_NAME",
     "EMAIL_PROVIDER",
     "EMAIL_PASSWORD_SIGN_IN",
-    "MASTODON_URL",
     "AI_PROXY_EXTRA_ROUTES",
     "MCP_OAUTH_ENABLED",
     "MCP_DCR_ENABLED",
@@ -144,7 +145,12 @@ export const PLAIN_GATEWAY_SETTINGS = [
     "THIRD_PARTY_DOMAIN",
     "EVENTS_ALLOW_PRIVATE_TARGETS",
 ];
-const PLAIN = new Set(PLAIN_GATEWAY_SETTINGS);
+const PLAIN = new Set([
+    ...PLAIN_GATEWAY_SETTINGS,
+    // The sign-in providers' ids, issuer, label and tenant; their client
+    // secrets are credentials.
+    ...PLAIN_SIGN_IN_SETTINGS,
+]);
 /** Whether a settable Gateway setting's value is a plain value, not a credential. */
 export function isPlainGatewaySetting(name) {
     return PLAIN.has(name);

package/dist/internal/identity.d.ts

@@ -1,12 +1,23 @@
-import { APP_ID_ENV, DEV_ENV, DEV_ISSUER, IDENTITY_ALG, IDENTITY_DEV_KEY_ID, IDENTITY_HEADER, IDENTITY_KEY_ID, ISSUER_ENV, PUBLIC_HEADER, PUBLIC_KEYS_ENV, PUBLIC_MARKER_SUB, type EveryAppUser, type IdentityChannel, type SystemClaims, type SystemTokenPurpose } from "./protocol.js";
-export { APP_ID_ENV, DEV_ENV, DEV_ISSUER, IDENTITY_ALG, IDENTITY_DEV_KEY_ID, IDENTITY_HEADER, IDENTITY_KEY_ID, ISSUER_ENV, PUBLIC_HEADER, PUBLIC_KEYS_ENV, PUBLIC_MARKER_SUB, type EveryAppUser, type IdentityChannel, };
+import { APP_ID_ENV, DEV_ENV, DEV_ISSUER, IDENTITY_ALG, IDENTITY_DEV_KEY_ID, IDENTITY_HEADER, IDENTITY_KEY_ID, ISSUER_ENV, ORG_ID_ENV, PUBLIC_HEADER, PUBLIC_KEYS_ENV, PUBLIC_MARKER_SUB, type EveryAppUser, type IdentityChannel, type SystemClaims, type SystemTokenPurpose } from "./protocol.js";
+export { APP_ID_ENV, DEV_ENV, DEV_ISSUER, IDENTITY_ALG, IDENTITY_DEV_KEY_ID, IDENTITY_HEADER, IDENTITY_KEY_ID, ISSUER_ENV, ORG_ID_ENV, PUBLIC_HEADER, PUBLIC_KEYS_ENV, PUBLIC_MARKER_SUB, type EveryAppUser, type IdentityChannel, };
 export declare class IdentityError extends Error {
     readonly status = 401;
     constructor(message: string);
 }
 export declare class ConfigurationError extends Error {
     readonly status = 500;
-    constructor(message: string);
+    /**
+     * The Gateway refusal code the same gap gets once deployed
+     * (`ai_provider_not_configured`, `ai_default_not_configured`), when the
+     * error is "not set up" rather than a mistake in the code.
+     */
+    readonly code: string | undefined;
+    /** The settings that would close the gap (`.dev.vars` names in local dev). */
+    readonly settings: readonly string[];
+    constructor(message: string, setup?: {
+        code: string;
+        settings?: readonly string[];
+    });
 }
 /**
  * Parse the public key set from an env var value. Accepts a JSON array of PEM
@@ -35,6 +46,25 @@ export interface VerifyOptions {
  * claims).
  */
 export declare function verifyIdentityJwt(token: string, options: VerifyOptions): Promise<EveryAppUser>;
+/** A verified identity, with when it stops being one. */
+export interface VerifiedIdentity {
+    user: EveryAppUser;
+    /** The token's `exp`, in epoch milliseconds. */
+    expiresAt: number;
+}
+/**
+ * {@link verifyIdentityJwt}, keeping the token's expiry: the SDK's request
+ * context stops forwarding an identity shortly before it, and goes on as
+ * the organization's background work.
+ */
+export declare function verifyIdentity(token: string, options: VerifyOptions): Promise<VerifiedIdentity>;
+/**
+ * The organization pin: a deployed Worker serves one organization
+ * (`EVERY_APP_ORG_ID`), and an identity for any other is refused, whatever
+ * its audience says. Throws {@link IdentityError} on a mismatch; a Worker
+ * with no pin (a shared app's) accepts every organization.
+ */
+export declare function assertOrganizationPin(user: EveryAppUser, organizationId: string | undefined): void;
 /**
  * Verify the gateway's system token (the value of `x-everyapp-system`)
  * fail-closed, for exactly one purpose. A user identity or public marker is
@@ -56,9 +86,16 @@ export interface IdentityResult {
     user: EveryAppUser | null;
     /** True when the gateway marked this request as a public route. */
     isPublic: boolean;
+    /** When the identity expires (epoch ms); null on a public route. */
+    expiresAt: number | null;
 }
 export interface RequestIdentityOptions {
     audience: string;
+    /**
+     * The organization this Worker is pinned to ({@link ORG_ID_ENV}): an
+     * identity for another is refused. Undefined accepts every organization.
+     */
+    organizationId?: string;
     /** Provide keys directly, or let {@link getIdentityFromRequest} read env. */
     publicKeys?: string[];
     /** Env bag to read {@link PUBLIC_KEYS_ENV} / {@link DEV_ENV} from. */
@@ -84,5 +121,5 @@ export declare function resolveVerifyOptions(options: RequestIdentityOptions): V
  * problem — including a bare/forged public header — so a re-exposed worker
  * fails closed.
  */
-export declare function getIdentityFromRequest(request: Request, options: RequestIdentityOptions): Promise<IdentityResult>;
+export declare function getIdentityFromRequest(request: Request | Headers, options: RequestIdentityOptions): Promise<IdentityResult>;
 //# sourceMappingURL=identity.d.ts.map

package/dist/internal/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/internal/identity.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,UAAU,EACV,OAAO,EACP,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,UAAU,EACV,aAAa,EACb,eAAe,EACf,iBAAiB,EAKjB,KAAK,YAAY,EACjB,KAAK,eAAe,EAEpB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,UAAU,EACV,OAAO,EACP,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,UAAU,EACV,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,CAAC;AAEF,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,OAAO;gBACV,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,OAAO;gBACV,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,EAAE,CA8B7E;AAYD,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,0BAA0B;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAeD;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,YAAY,CAAC,CAUvB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,GAAG;IAAE,OAAO,EAAE,kBAAkB,CAAA;CAAE,GACvD,OAAO,CAAC,YAAY,CAAC,CAUvB;AAoED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,sBAAsB,GAC9B,aAAa,CAwBf;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,cAAc,CAAC,CAiBzB"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/internal/identity.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,UAAU,EACV,OAAO,EACP,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,UAAU,EACV,UAAU,EACV,aAAa,EACb,eAAe,EACf,iBAAiB,EAKjB,KAAK,YAAY,EACjB,KAAK,eAAe,EAEpB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,UAAU,EACV,OAAO,EACP,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,UAAU,EACV,UAAU,EACV,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,CAAC;AAEF,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,OAAO;gBACV,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,OAAO;IACtB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;gBAEnC,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE;CAOzD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,EAAE,CA8B7E;AAYD,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,0BAA0B;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAeD;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,YAAY,CAAC,CAEvB;AAED,yDAAyD;AACzD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAY3B;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,EAClB,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,IAAI,CAMN;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,GAAG;IAAE,OAAO,EAAE,kBAAkB,CAAA;CAAE,GACvD,OAAO,CAAC,YAAY,CAAC,CAUvB;AAoED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,EAAE,OAAO,CAAC;IAClB,oEAAoE;IACpE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,sBAAsB,GAC9B,aAAa,CAwBf;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,OAAO,GAAG,OAAO,EAC1B,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,cAAc,CAAC,CAmBzB"}

package/dist/internal/identity.js

@@ -9,8 +9,8 @@
  * survives verification produces a user.
  */
 import { importSPKI, jwtVerify, decodeProtectedHeader, } from "jose";
-import { APP_ID_ENV, DEV_ENV, DEV_ISSUER, IDENTITY_ALG, IDENTITY_DEV_KEY_ID, IDENTITY_HEADER, IDENTITY_KEY_ID, ISSUER_ENV, PUBLIC_HEADER, PUBLIC_KEYS_ENV, PUBLIC_MARKER_SUB, assertPublicMarkerClaims, assertSystemClaims, identityClaimsToEveryAppUser, ProtocolClaimsError, } from "./protocol.js";
-export { APP_ID_ENV, DEV_ENV, DEV_ISSUER, IDENTITY_ALG, IDENTITY_DEV_KEY_ID, IDENTITY_HEADER, IDENTITY_KEY_ID, ISSUER_ENV, PUBLIC_HEADER, PUBLIC_KEYS_ENV, PUBLIC_MARKER_SUB, };
+import { APP_ID_ENV, DEV_ENV, DEV_ISSUER, IDENTITY_ALG, IDENTITY_DEV_KEY_ID, IDENTITY_HEADER, IDENTITY_KEY_ID, ISSUER_ENV, ORG_ID_ENV, PUBLIC_HEADER, PUBLIC_KEYS_ENV, PUBLIC_MARKER_SUB, assertPublicMarkerClaims, assertSystemClaims, identityClaimsToEveryAppUser, ProtocolClaimsError, } from "./protocol.js";
+export { APP_ID_ENV, DEV_ENV, DEV_ISSUER, IDENTITY_ALG, IDENTITY_DEV_KEY_ID, IDENTITY_HEADER, IDENTITY_KEY_ID, ISSUER_ENV, ORG_ID_ENV, PUBLIC_HEADER, PUBLIC_KEYS_ENV, PUBLIC_MARKER_SUB, };
 export class IdentityError extends Error {
     status = 401;
     constructor(message) {
@@ -20,9 +20,19 @@ export class IdentityError extends Error {
 }
 export class ConfigurationError extends Error {
     status = 500;
-    constructor(message) {
+    /**
+     * The Gateway refusal code the same gap gets once deployed
+     * (`ai_provider_not_configured`, `ai_default_not_configured`), when the
+     * error is "not set up" rather than a mistake in the code.
+     */
+    code;
+    /** The settings that would close the gap (`.dev.vars` names in local dev). */
+    settings;
+    constructor(message, setup) {
         super(message);
         this.name = "ConfigurationError";
+        this.code = setup?.code;
+        this.settings = setup?.settings ?? [];
     }
 }
 /**
@@ -81,9 +91,19 @@ function assertDevIssuer(options) {
  * claims).
  */
 export async function verifyIdentityJwt(token, options) {
+    return (await verifyIdentity(token, options)).user;
+}
+/**
+ * {@link verifyIdentityJwt}, keeping the token's expiry: the SDK's request
+ * context stops forwarding an identity shortly before it, and goes on as
+ * the organization's background work.
+ */
+export async function verifyIdentity(token, options) {
     const payload = await verifyPinnedJwt(token, options, "user");
     try {
-        return identityClaimsToEveryAppUser(payload);
+        const user = identityClaimsToEveryAppUser(payload);
+        // `exp` is a required claim (verifyPinnedJwt); jose checked it.
+        return { user, expiresAt: payload.exp * 1000 };
     }
     catch (error) {
         if (error instanceof ProtocolClaimsError) {
@@ -92,6 +112,17 @@ export async function verifyIdentityJwt(token, options) {
         throw error;
     }
 }
+/**
+ * The organization pin: a deployed Worker serves one organization
+ * (`EVERY_APP_ORG_ID`), and an identity for any other is refused, whatever
+ * its audience says. Throws {@link IdentityError} on a mismatch; a Worker
+ * with no pin (a shared app's) accepts every organization.
+ */
+export function assertOrganizationPin(user, organizationId) {
+    if (organizationId && user.orgId !== organizationId) {
+        throw new IdentityError(`identity is for organization "${user.orgId}", and this Worker serves organization "${organizationId}" (${ORG_ID_ENV})`);
+    }
+}
 /**
  * Verify the gateway's system token (the value of `x-everyapp-system`)
  * fail-closed, for exactly one purpose. A user identity or public marker is
@@ -137,7 +168,7 @@ async function verifyPinnedJwt(token, options, expectedTyp) {
         throw new IdentityError(`unexpected kid "${header.kid}"`);
     }
     if (expectedTyp !== "public" && !options.issuer) {
-        throw new IdentityError(`${ISSUER_ENV} not configured — deploy with the Every App CLI or provide an explicit issuer.`);
+        throw new IdentityError(`${ISSUER_ENV} not configured — deploy with the EveryApp CLI or provide an explicit issuer.`);
     }
     const verifyOpts = {
         algorithms: [IDENTITY_ALG],
@@ -217,15 +248,22 @@ export function resolveVerifyOptions(options) {
  */
 export async function getIdentityFromRequest(request, options) {
     const verifyOptions = resolveVerifyOptions(options);
-    const publicMarker = request.headers.get(PUBLIC_HEADER);
+    const headers = isRequestLike(request) ? request.headers : request;
+    const publicMarker = headers.get(PUBLIC_HEADER);
     if (publicMarker) {
         await verifyPublicMarkerJwt(publicMarker, verifyOptions);
-        return { user: null, isPublic: true };
+        return { user: null, isPublic: true, expiresAt: null };
     }
-    const token = request.headers.get(IDENTITY_HEADER);
+    const token = headers.get(IDENTITY_HEADER);
     if (!token) {
         throw new IdentityError("request reached the app without an identity token (not proxied through the gateway?)");
     }
-    const user = await verifyIdentityJwt(token, verifyOptions);
-    return { user, isPublic: false };
+    const { user, expiresAt } = await verifyIdentity(token, verifyOptions);
+    assertOrganizationPin(user, options.organizationId);
+    return { user, isPublic: false, expiresAt };
+}
+// Duck-typed: a Request from another realm (a test runner, a polyfill) still
+// carries its headers the same way.
+function isRequestLike(value) {
+    return "headers" in value && typeof value.headers?.get === "function";
 }

package/dist/internal/index.d.ts

@@ -2,6 +2,7 @@ export * from "./protocol.js";
 export * from "./tools.js";
 export * from "./capabilities.js";
 export * from "./aiProviders.js";
+export * from "./aiDefault.js";
 export * from "./gatewaySettings.js";
 export * from "./appSettings.js";
 export * from "./email.js";
@@ -9,11 +10,15 @@ export * from "./members.js";
 export * from "./organizationName.js";
 export * from "./oauthClient.js";
 export * from "./oauthScopes.js";
+export * from "./oauthSpec.js";
+export * from "./oauthPresets.js";
 export * from "./providerApps.js";
 export * from "./events.js";
+export * from "./audit.js";
 export * from "./providerSpec.js";
 export * from "./providerRegistry.js";
 export * from "./remoteMcp.js";
+export * from "./signInProviders.js";
 export * from "./devProviders.js";
-export { ConfigurationError, IdentityError, getIdentityFromRequest, parsePublicKeys, resolveVerifyOptions, verifyIdentityJwt, verifyPublicMarkerJwt, verifySystemJwt, type IdentityResult, type RequestIdentityOptions, type VerifyOptions, } from "./identity.js";
+export { ConfigurationError, IdentityError, assertOrganizationPin, getIdentityFromRequest, parsePublicKeys, resolveVerifyOptions, verifyIdentity, verifyIdentityJwt, verifyPublicMarkerJwt, verifySystemJwt, type IdentityResult, type RequestIdentityOptions, type VerifiedIdentity, type VerifyOptions, } from "./identity.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/internal/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/internal/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/internal/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC"}

package/dist/internal/index.js

@@ -2,6 +2,7 @@ export * from "./protocol.js";
 export * from "./tools.js";
 export * from "./capabilities.js";
 export * from "./aiProviders.js";
+export * from "./aiDefault.js";
 export * from "./gatewaySettings.js";
 export * from "./appSettings.js";
 export * from "./email.js";
@@ -9,10 +10,14 @@ export * from "./members.js";
 export * from "./organizationName.js";
 export * from "./oauthClient.js";
 export * from "./oauthScopes.js";
+export * from "./oauthSpec.js";
+export * from "./oauthPresets.js";
 export * from "./providerApps.js";
 export * from "./events.js";
+export * from "./audit.js";
 export * from "./providerSpec.js";
 export * from "./providerRegistry.js";
 export * from "./remoteMcp.js";
+export * from "./signInProviders.js";
 export * from "./devProviders.js";
-export { ConfigurationError, IdentityError, getIdentityFromRequest, parsePublicKeys, resolveVerifyOptions, verifyIdentityJwt, verifyPublicMarkerJwt, verifySystemJwt, } from "./identity.js";
+export { ConfigurationError, IdentityError, assertOrganizationPin, getIdentityFromRequest, parsePublicKeys, resolveVerifyOptions, verifyIdentity, verifyIdentityJwt, verifyPublicMarkerJwt, verifySystemJwt, } from "./identity.js";

package/dist/internal/members.d.ts

@@ -4,8 +4,9 @@
  * gateway builds it, the SDK's `listMembers()` returns it, and its local-dev
  * fallback answers in the same shape. Types only.
  */
-/** A member's role in the organization. */
-export type OrganizationMemberRole = "owner" | "admin" | "member";
+import type { OrgRole } from "./protocol.js";
+/** A member's role in the organization: the identity token's {@link OrgRole}. */
+export type OrganizationMemberRole = OrgRole;
 /**
  * One member of the organization who can open the app: not deactivated,
  * and, for an organization's own app, granted it.

package/dist/internal/members.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../src/internal/members.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,2CAA2C;AAC3C,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAElE;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,sBAAsB,CAAC;CAC9B;AAED,2BAA2B;AAC3B,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AAED,yEAAyE;AACzE,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,SAAS,CAAC;IACtB,0CAA0C;IAC1C,SAAS,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,UAAU,EAAE,IAAI,CAAC;IACjB,8BAA8B;IAC9B,KAAK,EAAE,OAAO,CAAC;CAChB"}
+{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../src/internal/members.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,iFAAiF;AACjF,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE7C;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,sBAAsB,CAAC;CAC9B;AAED,2BAA2B;AAC3B,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AAED,yEAAyE;AACzE,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,SAAS,CAAC;IACtB,0CAA0C;IAC1C,SAAS,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,UAAU,EAAE,IAAI,CAAC;IACjB,8BAA8B;IAC9B,KAAK,EAAE,OAAO,CAAC;CAChB"}

package/dist/internal/oauthBuiltIns.d.ts

@@ -0,0 +1,101 @@
+/**
+ * The OAuth providers every Gateway has built in, as `oauth2-user` specs:
+ * the same JSON shape as the presets (./oauthPresets.ts) and a registered
+ * row (`everyapp provider add`). What differs between Google, Microsoft
+ * and Slack is here as data: the endpoints, the API hosts, how scopes are
+ * separated and prefixed, the extra authorize parameters, how the account
+ * is named, and the scopes a token may carry beyond what the app asked.
+ * No code anywhere reads a provider id to decide anything.
+ *
+ * Pure data with no imports, so the catalog (./capabilities.ts) can build
+ * its entries from it without an import cycle. Each spec parses with
+ * `parseProviderSpec` and round-trips through `oauthSpecOf`
+ * (oauthBuiltIns.test.ts).
+ */
+export declare const BUILT_IN_OAUTH_SPECS: {
+    readonly "google-workspace": {
+        readonly id: "google-workspace";
+        readonly name: "Google";
+        readonly description: "Gmail, Calendar, Drive, Search Console, Analytics and the other Google APIs, as the person who connects.";
+        readonly docs: "https://console.cloud.google.com/apis/credentials";
+        readonly api: "https://developers.google.com/identity/protocols/oauth2/scopes";
+        readonly hosts: readonly ["gmail.googleapis.com", "www.googleapis.com", "searchconsole.googleapis.com", "analyticsdata.googleapis.com", "analyticsadmin.googleapis.com", "openidconnect.googleapis.com"];
+        readonly auth: {
+            readonly kind: "oauth2-user";
+            readonly authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth";
+            readonly tokenUrl: "https://oauth2.googleapis.com/token";
+            readonly clientId: "GOOGLE_WORKSPACE_CLIENT_ID";
+            readonly clientSecret: "GOOGLE_WORKSPACE_CLIENT_SECRET";
+            readonly inject: "form";
+            readonly pkce: true;
+            readonly scopeSeparator: "space";
+            readonly scopePrefix: "https://www.googleapis.com/auth/";
+            readonly authorizeParams: {
+                readonly access_type: "offline";
+                readonly prompt: "consent";
+            };
+            readonly identity: {
+                readonly url: "https://openidconnect.googleapis.com/v1/userinfo";
+                readonly label: "email";
+                readonly id: "sub";
+                readonly scopes: readonly ["openid", "email"];
+            };
+            readonly tolerated: readonly ["profile", "https://www.googleapis.com/auth/userinfo.email", "https://www.googleapis.com/auth/userinfo.profile"];
+        };
+        readonly hint: "A Web application OAuth client in Google Cloud, with the Gateway's callback as its redirect URI and the scopes your apps list on its consent screen.";
+    };
+    readonly "microsoft-365": {
+        readonly id: "microsoft-365";
+        readonly name: "Microsoft 365";
+        readonly description: "Outlook mail and calendar, OneDrive and the rest of Microsoft Graph, as the person who connects.";
+        readonly docs: "https://entra.microsoft.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade";
+        readonly api: "https://learn.microsoft.com/graph/permissions-reference";
+        readonly hosts: readonly ["graph.microsoft.com"];
+        readonly auth: {
+            readonly kind: "oauth2-user";
+            readonly authorizeUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize";
+            readonly tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token";
+            readonly clientId: "MICROSOFT_365_CLIENT_ID";
+            readonly clientSecret: "MICROSOFT_365_CLIENT_SECRET";
+            readonly inject: "form";
+            readonly pkce: true;
+            readonly scopeSeparator: "space";
+            readonly scopePrefix: "https://graph.microsoft.com/";
+            readonly identity: {
+                readonly url: "https://graph.microsoft.com/v1.0/me";
+                readonly label: "userPrincipalName";
+                readonly id: "id";
+                readonly scopes: readonly ["User.Read", "offline_access"];
+            };
+            readonly tolerated: readonly ["openid", "profile", "email"];
+        };
+        readonly hint: "An app registration in Entra for accounts in any organization and personal accounts, with the Gateway's callback as a Web redirect URI. If two apps share this client with different scopes, Microsoft may hand back both apps' scopes and the Gateway refuses the token: give each app its own client.";
+    };
+    readonly slack: {
+        readonly id: "slack";
+        readonly name: "Slack";
+        readonly description: "Channels, members and messages, as the Slack app.";
+        readonly docs: "https://api.slack.com/apps";
+        readonly api: "https://api.slack.com/scopes";
+        readonly hosts: readonly ["slack.com"];
+        readonly auth: {
+            readonly kind: "oauth2-user";
+            readonly authorizeUrl: "https://slack.com/oauth/v2/authorize";
+            readonly tokenUrl: "https://slack.com/api/oauth.v2.access";
+            readonly revokeUrl: "https://slack.com/api/auth.revoke";
+            readonly clientId: "SLACK_CLIENT_ID";
+            readonly clientSecret: "SLACK_CLIENT_SECRET";
+            readonly inject: "form";
+            readonly pkce: false;
+            readonly scopeSeparator: "comma";
+            readonly identity: {
+                readonly url: "https://slack.com/api/auth.test";
+                readonly label: "team";
+                readonly id: "team_id";
+            };
+        };
+        readonly hint: "A Slack app with the Gateway's callback as its redirect URL and the bot scopes your apps list.";
+    };
+};
+export type BuiltInOAuthId = keyof typeof BUILT_IN_OAUTH_SPECS;
+//# sourceMappingURL=oauthBuiltIns.d.ts.map