@every-app/sdk 0.3.0-rc.10 → 0.3.0-rc.11

package/dist/server/tools.d.ts

@@ -17,7 +17,8 @@
  *
  * Apps never speak MCP. The gateway snapshots this catalog at deploy, serves
  * MCP clients from the snapshot, and calls a tool over the internal tools
- * contract (../internal/tools.ts) with a verified `chan: "mcp"` identity.
+ * contract (../internal/tools.ts) with a verified `chan: "mcp"` or
+ * `chan: "agent"` identity.
  *
  * `input` and `output` accept any validator implementing Standard Schema and
  * Standard JSON Schema (zod >= 4.2 does both), or a plain
@@ -81,7 +82,11 @@ export interface PlainToolSchema<Output = unknown> {
 export type ToolSchema<Output = unknown> = StandardSchemaWithJSON<unknown, Output> | PlainToolSchema<Output>;
 /** What a tool handler receives besides its validated input. */
 export interface ToolContext<TEnv = Cloudflare.Env> {
-    /** The verified caller. `channel` is "mcp"; `toolCall` names this call. */
+    /**
+     * The verified caller. `channel` is "mcp" (an AI client) or "agent" (an
+     * agent principal: `isAgentCall(user)`, `actor.sub` `agent:<id>`, `id`
+     * its sponsor); `toolCall` names this call.
+     */
     user: EveryAppUser;
     env: TEnv;
     ctx: ExecutionContextLike;

package/dist/server/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/server/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D,4DAA4D;AAC5D,eAAO,MAAM,WAAW,UAAU,CAAC;AASnC;;;;GAIG;AACH,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAID,KAAK,mBAAmB,GAAG,WAAW,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvE,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;CAChE;AAED,KAAK,cAAc,CAAC,MAAM,IACtB;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,CAAA;CAAE,CAAC;AAEtD,UAAU,mBAAmB,CAAC,KAAK,EAAE,MAAM;IACzC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,CAAC,EACX;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAClD,SAAS,CAAC;CACf;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,kFAAkF;AAClF,MAAM,WAAW,sBAAsB,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,KAAK;IACrE,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG;QACzD,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;KAClD,CAAC;CACH;AAED,+EAA+E;AAC/E,MAAM,WAAW,eAAe,CAAC,MAAM,GAAG,OAAO;IAC/C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,QAAQ,CACN,KAAK,EAAE,OAAO,GACb,cAAc,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;CAC7D;AAED,MAAM,MAAM,UAAU,CAAC,MAAM,GAAG,OAAO,IACnC,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,GACvC,eAAe,CAAC,MAAM,CAAC,CAAC;AAE5B,gEAAgE;AAChE,MAAM,WAAW,WAAW,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG;IAChD,2EAA2E;IAC3E,IAAI,EAAE,YAAY,CAAC;IACnB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,oBAAoB,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc,CAAC,MAAM,GAAG,OAAO;IAC9C,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,IAAI,EAAE,QAAQ,CAAC;IACf,iDAAiD;IACjD,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC;CAC3D;AAED,QAAA,MAAM,WAAW,eAAoC,CAAC;AAEtD,mEAAmE;AACnE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,GAAG,UAAU,CAMb;AAQD,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,4EAA4E;AAC5E,MAAM,WAAW,OAAO;IACtB,0BAA0B;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,UAAU,gBAAgB;IACxB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC/C,uDAAuD;IACvD,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CACjC;AAID,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAMnE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,KAAK,EAAE;KAAG,CAAC,IAAI,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CAAE,EAC3D,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CA+BT;AA+ND,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC;AAEzC,qCAAqC;AACrC,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EACrB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAQ/B;AAiBD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,gBAAgB,CAAC,CAuC3B"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/server/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D,4DAA4D;AAC5D,eAAO,MAAM,WAAW,UAAU,CAAC;AASnC;;;;GAIG;AACH,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAID,KAAK,mBAAmB,GAAG,WAAW,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvE,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;CAChE;AAED,KAAK,cAAc,CAAC,MAAM,IACtB;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,CAAA;CAAE,CAAC;AAEtD,UAAU,mBAAmB,CAAC,KAAK,EAAE,MAAM;IACzC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,CAAC,EACX;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAClD,SAAS,CAAC;CACf;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,kFAAkF;AAClF,MAAM,WAAW,sBAAsB,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,KAAK;IACrE,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG;QACzD,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;KAClD,CAAC;CACH;AAED,+EAA+E;AAC/E,MAAM,WAAW,eAAe,CAAC,MAAM,GAAG,OAAO;IAC/C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,QAAQ,CACN,KAAK,EAAE,OAAO,GACb,cAAc,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;CAC7D;AAED,MAAM,MAAM,UAAU,CAAC,MAAM,GAAG,OAAO,IACnC,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,GACvC,eAAe,CAAC,MAAM,CAAC,CAAC;AAE5B,gEAAgE;AAChE,MAAM,WAAW,WAAW,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG;IAChD;;;;OAIG;IACH,IAAI,EAAE,YAAY,CAAC;IACnB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,oBAAoB,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc,CAAC,MAAM,GAAG,OAAO;IAC9C,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,IAAI,EAAE,QAAQ,CAAC;IACf,iDAAiD;IACjD,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC;CAC3D;AAED,QAAA,MAAM,WAAW,eAAoC,CAAC;AAEtD,mEAAmE;AACnE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,GAAG,UAAU,CAMb;AAQD,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,4EAA4E;AAC5E,MAAM,WAAW,OAAO;IACtB,0BAA0B;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,UAAU,gBAAgB;IACxB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC/C,uDAAuD;IACvD,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CACjC;AAID,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAMnE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,KAAK,EAAE;KAAG,CAAC,IAAI,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CAAE,EAC3D,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CA+BT;AA+ND,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC;AAEzC,qCAAqC;AACrC,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EACrB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAQ/B;AAiBD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,gBAAgB,CAAC,CAuC3B"}

package/dist/server/tools.js

@@ -17,7 +17,8 @@
  *
  * Apps never speak MCP. The gateway snapshots this catalog at deploy, serves
  * MCP clients from the snapshot, and calls a tool over the internal tools
- * contract (../internal/tools.ts) with a verified `chan: "mcp"` identity.
+ * contract (../internal/tools.ts) with a verified `chan: "mcp"` or
+ * `chan: "agent"` identity.
  *
  * `input` and `output` accept any validator implementing Standard Schema and
  * Standard JSON Schema (zod >= 4.2 does both), or a plain

package/dist/server/toolsEndpoint.d.ts

@@ -7,7 +7,9 @@
  *  - `/__everyapp/tools/list` needs the gateway's system token for this app
  *    (purpose "tools.list"). It describes tools; it never runs them.
  *  - `/__everyapp/tools/call` needs an identity token minted for this exact
- *    call: `chan: "mcp"` plus a `tc` claim naming the tool and call id. The
+ *    call: `chan: "mcp"` (an AI client's MCP connection) or `chan: "agent"`
+ *    (an agent principal, `act.sub` `agent:<id>`, with its sponsor as `sub`),
+ *    plus a `tc` claim naming the tool and call id. The
  *    token's scopes must include the scope the tool's risk requires; `*` does
  *    not count, because the ToolBus only ever mints explicit scopes.
  *

package/dist/server/toolsEndpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"toolsEndpoint.d.ts","sourceRoot":"","sources":["../../src/server/toolsEndpoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAcL,KAAK,sBAAsB,EAO5B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAOL,KAAK,OAAO,EACb,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,QAAQ,EAAE,sBAAsB,CAAC;CAClC;AAoFD;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,oBAAoB,EACzB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAyB1B"}
+{"version":3,"file":"toolsEndpoint.d.ts","sourceRoot":"","sources":["../../src/server/toolsEndpoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAgBL,KAAK,sBAAsB,EAO5B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAOL,KAAK,OAAO,EACb,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,QAAQ,EAAE,sBAAsB,CAAC;CAClC;AAoFD;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,oBAAoB,EACzB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAyB1B"}

package/dist/server/toolsEndpoint.js

@@ -7,14 +7,16 @@
  *  - `/__everyapp/tools/list` needs the gateway's system token for this app
  *    (purpose "tools.list"). It describes tools; it never runs them.
  *  - `/__everyapp/tools/call` needs an identity token minted for this exact
- *    call: `chan: "mcp"` plus a `tc` claim naming the tool and call id. The
+ *    call: `chan: "mcp"` (an AI client's MCP connection) or `chan: "agent"`
+ *    (an agent principal, `act.sub` `agent:<id>`, with its sponsor as `sub`),
+ *    plus a `tc` claim naming the tool and call id. The
  *    token's scopes must include the scope the tool's risk requires; `*` does
  *    not count, because the ToolBus only ever mints explicit scopes.
  *
  * The perimeter also refuses these paths from outside and strips inbound
  * `x-everyapp-*` headers, so only the gateway's ToolBus ever reaches them.
  */
-import { ConfigurationError, IDENTITY_HEADER, IdentityError, SYSTEM_HEADER, TOOLS_CALL_PATH, TOOLS_LIST_PATH, TOOLS_PROTOCOL_VERSION, assertOrganizationPin, catalogHash, requiredScopeForRisk, resolveVerifyOptions, verifyIdentity, verifySystemJwt, } from "../internal/index.js";
+import { ConfigurationError, IDENTITY_HEADER, IdentityError, SYSTEM_HEADER, TOOL_CALL_CHANNELS, TOOLS_CALL_PATH, TOOLS_LIST_PATH, TOOLS_PROTOCOL_VERSION, assertOrganizationPin, catalogHash, isAgentCall, requiredScopeForRisk, resolveVerifyOptions, verifyIdentity, verifySystemJwt, } from "../internal/index.js";
 import { serveRequest } from "./context.js";
 import { SDK_VERSION, ToolError, toToolResult, toolSetInternals, validateWithSchema, } from "./tools.js";
 function toolsJson(status, body, headers = {}) {
@@ -162,7 +164,11 @@ async function callTool(request, env, ctx, verify, options) {
         }
         throw error;
     }
-    if (user.channel !== "mcp" || !user.toolCall) {
+    if (!TOOL_CALL_CHANNELS.includes(user.channel) ||
+        !user.toolCall ||
+        // An agent call names its agent; a `chan: "agent"` token without one
+        // is not something the ToolBus mints.
+        (user.channel === "agent" && !isAgentCall(user))) {
         return toolsError(403, "forbidden", "Tool calls need an identity the gateway minted for this call.");
     }
     const call = parseCallRequest(await readJsonBody(request));

package/dist/server/webhooks.d.ts

@@ -0,0 +1,56 @@
+export type WebhookProvider = "slack" | "github" | "everyapp";
+export interface VerifyWebhookOptions {
+    provider: WebhookProvider;
+    /** The signing secret, or several while one rotates. Empty ones are ignored. */
+    secret: string | readonly string[];
+    /** How far a signed timestamp may be from now (Slack, EveryApp). Default 300 s. */
+    toleranceSeconds?: number;
+    /** The largest body read before giving up. Default 5 MiB. */
+    maxBytes?: number;
+    /** The clock, for tests. */
+    now?: Date;
+}
+export type WebhookRefusalReason = 
+/** No usable secret was passed: a configuration fault, never the sender's. */
+"no_secret"
+/** The provider's signature header is absent. */
+ | "missing_signature"
+/** A signature or timestamp header that isn't the provider's shape. */
+ | "malformed"
+/** The signed timestamp is outside the tolerance. */
+ | "expired"
+/** The body is larger than `maxBytes`. */
+ | "too_large"
+/** The body was already read, or its stream failed mid-read. */
+ | "unreadable"
+/** No secret verifies the signature. */
+ | "mismatch";
+export type WebhookVerification = {
+    ok: true;
+    /** The body exactly as signed. The request's own body is consumed: parse this. */
+    body: string;
+    /** The provider's id for this delivery, for deduplication; null when it sends none. */
+    deliveryId: string | null;
+    /** The signed timestamp in seconds; null for GitHub, which signs none. */
+    timestamp: number | null;
+} | {
+    ok: false;
+    reason: WebhookRefusalReason;
+};
+/** The default body limit: well above Slack's payloads and most of GitHub's (whose cap is 25 MB). */
+export declare const WEBHOOK_MAX_BYTES_DEFAULT: number;
+/**
+ * Verify `request` as a `provider` webhook signed with `secret`. Reads the
+ * body (at most `maxBytes`) and returns it on success; never throws for a
+ * bad delivery, so a handler answers `401` on `{ ok: false }`. Throws a
+ * `TypeError` only for a programming error: an unknown `provider`, or a
+ * `toleranceSeconds` or `maxBytes` that is negative, NaN or infinite.
+ *
+ * ```ts
+ * const check = await verifyWebhook(request, { provider: "slack", secret: env.SLACK_SIGNING_SECRET });
+ * if (!check.ok) return new Response(null, { status: 401 });
+ * const params = new URLSearchParams(check.body);
+ * ```
+ */
+export declare function verifyWebhook(request: Request, options: VerifyWebhookOptions): Promise<WebhookVerification>;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/server/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/server/webhooks.ts"],"names":[],"mappings":"AAiCA,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE9D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,eAAe,CAAC;IAC1B,gFAAgF;IAChF,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IACnC,mFAAmF;IACnF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,MAAM,oBAAoB;AAC9B,8EAA8E;AAC5E,WAAW;AACb,iDAAiD;GAC/C,mBAAmB;AACrB,uEAAuE;GACrE,WAAW;AACb,qDAAqD;GACnD,SAAS;AACX,0CAA0C;GACxC,WAAW;AACb,gEAAgE;GAC9D,YAAY;AACd,wCAAwC;GACtC,UAAU,CAAC;AAEf,MAAM,MAAM,mBAAmB,GAC3B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0EAA0E;IAC1E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAEhD,qGAAqG;AACrG,eAAO,MAAM,yBAAyB,QAAkB,CAAC;AAMzD;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CA4D9B"}

package/dist/server/webhooks.js

@@ -0,0 +1,205 @@
+/**
+ * `verifyWebhook()`: check an inbound provider webhook on a route the
+ * manifest declares `public`, the way the provider signs it.
+ *
+ * The Gateway forwards a public route's body and headers untouched and
+ * verifies nothing (landing-page/content/agent/manifest.md, "Why a route is
+ * public"): the app checks the provider's signature itself, with the signing
+ * secret it declares in `secrets`. Every app that takes a webhook would
+ * otherwise write this HMAC code again, and the easy mistakes (a `===`
+ * compare, no timestamp window, verifying a re-serialized body, reading an
+ * unbounded body first) are the ones that matter. Proposed in
+ * docs/design/2026-11-birds-forcing-function.md (limitation 6).
+ *
+ * Supported signing schemes:
+ *  - `slack`: `X-Slack-Signature: v0=<hex>` over `v0:<timestamp>:<body>`,
+ *    with `X-Slack-Request-Timestamp` inside the tolerance;
+ *  - `github`: `X-Hub-Signature-256: sha256=<hex>` over the body. GitHub
+ *    signs no timestamp, so a replay is the receiver's to drop: dedupe on
+ *    `deliveryId` (`X-GitHub-Delivery`);
+ *  - `everyapp`: a Gateway's own event delivery, `X-EveryApp-Signature:
+ *    t=<seconds>,v1=<hex>` over `<t>.<body>` (the same check as the
+ *    Gateway's `verifyEventSignature`), deduped on `X-EveryApp-Event-Id`.
+ *
+ * WebCrypto only. The compare is `crypto.subtle.verify`, constant time.
+ * Several secrets may be given, so a secret rotates without a gap.
+ */
+import { EVENT_HEADERS, EVENT_SIGNATURE_TOLERANCE_SECONDS, eventSigningInput, parseEventSignature, } from "../internal/events.js";
+/** The default body limit: well above Slack's payloads and most of GitHub's (whose cap is 25 MB). */
+export const WEBHOOK_MAX_BYTES_DEFAULT = 5 * 1024 * 1024;
+const HEX_SHA256 = /^[0-9a-f]{64}$/i;
+const MAX_EVENT_SIGNATURES = 4;
+const encoder = new TextEncoder();
+/**
+ * Verify `request` as a `provider` webhook signed with `secret`. Reads the
+ * body (at most `maxBytes`) and returns it on success; never throws for a
+ * bad delivery, so a handler answers `401` on `{ ok: false }`. Throws a
+ * `TypeError` only for a programming error: an unknown `provider`, or a
+ * `toleranceSeconds` or `maxBytes` that is negative, NaN or infinite.
+ *
+ * ```ts
+ * const check = await verifyWebhook(request, { provider: "slack", secret: env.SLACK_SIGNING_SECRET });
+ * if (!check.ok) return new Response(null, { status: 401 });
+ * const params = new URLSearchParams(check.body);
+ * ```
+ */
+export async function verifyWebhook(request, options) {
+    const secrets = (typeof options.secret === "string" ? [options.secret] : options.secret).filter((secret) => typeof secret === "string" && secret.length > 0);
+    if (secrets.length === 0)
+        return refused("no_secret");
+    // A NaN or infinite tolerance or limit would quietly turn the window or the
+    // read bound off (every comparison with NaN is false): refuse the call.
+    const tolerance = checkedOption("toleranceSeconds", options.toleranceSeconds, EVENT_SIGNATURE_TOLERANCE_SECONDS);
+    const maxBytes = checkedOption("maxBytes", options.maxBytes, WEBHOOK_MAX_BYTES_DEFAULT);
+    const signed = readSignature(request.headers, options.provider);
+    if (!signed.ok)
+        return signed;
+    if (signed.timestamp !== null) {
+        const nowSeconds = Math.floor((options.now ?? new Date()).getTime() / 1000);
+        if (Math.abs(nowSeconds - signed.timestamp) > tolerance) {
+            return refused("expired");
+        }
+    }
+    const bytes = await readBody(request, maxBytes);
+    if (bytes === "unreadable")
+        return refused("unreadable");
+    if (bytes === null)
+        return refused("too_large");
+    // The HMAC runs over the bytes received, never a decoded and re-encoded copy.
+    const prefix = encoder.encode(signed.prefix);
+    const data = new Uint8Array(new ArrayBuffer(prefix.byteLength + bytes.byteLength));
+    data.set(prefix, 0);
+    data.set(bytes, prefix.byteLength);
+    for (const secret of secrets) {
+        const key = await crypto.subtle.importKey("raw", encoder.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["verify"]);
+        for (const candidate of signed.digests) {
+            if (await crypto.subtle.verify("HMAC", key, fromHex(candidate), data)) {
+                return {
+                    ok: true,
+                    body: new TextDecoder().decode(bytes),
+                    deliveryId: signed.deliveryId,
+                    timestamp: signed.timestamp,
+                };
+            }
+        }
+    }
+    return refused("mismatch");
+}
+function readSignature(headers, provider) {
+    switch (provider) {
+        case "slack": {
+            const header = headers.get("x-slack-signature");
+            if (!header)
+                return refused("missing_signature");
+            const rawTimestamp = headers.get("x-slack-request-timestamp");
+            const digest = header.startsWith("v0=") ? header.slice(3) : "";
+            if (!HEX_SHA256.test(digest) ||
+                !rawTimestamp ||
+                !/^\d{1,12}$/.test(rawTimestamp)) {
+                return refused("malformed");
+            }
+            return {
+                ok: true,
+                digests: [digest.toLowerCase()],
+                timestamp: Number(rawTimestamp),
+                deliveryId: null,
+                prefix: `v0:${rawTimestamp}:`,
+            };
+        }
+        case "github": {
+            const header = headers.get("x-hub-signature-256");
+            if (!header)
+                return refused("missing_signature");
+            const digest = header.startsWith("sha256=") ? header.slice(7) : "";
+            if (!HEX_SHA256.test(digest))
+                return refused("malformed");
+            return {
+                ok: true,
+                digests: [digest.toLowerCase()],
+                timestamp: null,
+                deliveryId: headers.get("x-github-delivery"),
+                prefix: "",
+            };
+        }
+        case "everyapp": {
+            const header = headers.get(EVENT_HEADERS.signature);
+            if (!header)
+                return refused("missing_signature");
+            const parsed = parseEventSignature(header);
+            // The Gateway sends one v1 (two while a secret rotates): a header with
+            // many isn't one it sent, and each would cost an HMAC per secret.
+            if (!parsed || parsed.v1.length > MAX_EVENT_SIGNATURES) {
+                return refused("malformed");
+            }
+            return {
+                ok: true,
+                digests: parsed.v1,
+                timestamp: parsed.timestamp,
+                deliveryId: headers.get(EVENT_HEADERS.eventId),
+                prefix: eventSigningInput(parsed.timestamp, ""),
+            };
+        }
+        default: {
+            const unknown = provider;
+            throw new TypeError(`verifyWebhook: unknown provider "${String(unknown)}"`);
+        }
+    }
+}
+/** A finite, non-negative option, or its default when not given. */
+function checkedOption(name, value, fallback) {
+    if (value === undefined)
+        return fallback;
+    if (typeof value !== "number" || !Number.isFinite(value) || value < 0) {
+        throw new TypeError(`verifyWebhook: ${name} must be a finite number of at least 0`);
+    }
+    return value;
+}
+/**
+ * The body's bytes; null once it passes `maxBytes` (read no further);
+ * "unreadable" when it was already consumed or its stream fails.
+ */
+async function readBody(request, maxBytes) {
+    const declared = Number(request.headers.get("content-length"));
+    if (Number.isFinite(declared) && declared > maxBytes)
+        return null;
+    if (request.bodyUsed)
+        return "unreadable";
+    if (!request.body)
+        return new Uint8Array(new ArrayBuffer(0));
+    const chunks = [];
+    let total = 0;
+    try {
+        const reader = request.body.getReader();
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            total += value.byteLength;
+            if (total > maxBytes) {
+                await reader.cancel().catch(() => undefined);
+                return null;
+            }
+            chunks.push(value);
+        }
+    }
+    catch {
+        return "unreadable";
+    }
+    const bytes = new Uint8Array(new ArrayBuffer(total));
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes;
+}
+function fromHex(hex) {
+    const bytes = new Uint8Array(new ArrayBuffer(hex.length / 2));
+    for (let index = 0; index < bytes.length; index += 1) {
+        bytes[index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
+    }
+    return bytes;
+}
+function refused(reason) {
+    return { ok: false, reason };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@every-app/sdk",
-  "version": "0.3.0-rc.10",
+  "version": "0.3.0-rc.11",
   "license": "MIT",
   "type": "module",
   "exports": {

package/dist/server/authorizeUrl.d.ts

@@ -1,43 +0,0 @@
-import { type OAuthClientCapabilityId } from "../internal/index.js";
-import type { OAuthClientIntegrationStatus } from "./integrationFetch.js";
-export interface AuthorizeUrlOptions {
-    /** The OAuth client, as listed in the manifest's `capabilities`. */
-    provider: OAuthClientCapabilityId;
-    /** What `integrationStatus()` answered for it, ready and with its `clientId`. */
-    status: OAuthClientIntegrationStatus;
-    /** One of the redirect URIs the operator registered on the client. */
-    redirectUri: string;
-    /** The app's own anti-forgery value, checked when the person comes back. */
-    state: string;
-    /** PKCE: the S256 challenge of the verifier the app keeps for the exchange. */
-    codeChallenge?: string;
-    /**
-     * The provider's extras (`prompt`, `login_hint`, Google's `hd`). Never
-     * one of the parameters this helper sets (PKCE's and the provider's own
-     * included), nor Google's `include_granted_scopes`.
-     */
-    params?: Record<string, string>;
-}
-/**
- * The provider's authorize URL to send a person to, for a client with
- * scope sets (`google-workspace`, `microsoft-365`, `slack`), built from the
- * capability's status: the registry's authorize endpoint (or the instance
- * the status names), `client_id`, `response_type=code`, `redirect_uri`,
- * `state`, and the scopes the status allows this app, which are exactly
- * what the gateway will let the token carry. Each provider's own needs
- * are added: Google's `access_type=offline` (a refresh token), Microsoft's
- * `response_mode=query`, Slack's comma-joined `scope` and its `user_scope`
- * (the status's `userScopes`, when the app's sets include a user set). With
- * `codeChallenge`, PKCE as S256. The app keeps its `state` and verifier
- * for the callback.
- *
- * A client without scope sets is refused: the
- * registry's checklist for one isn't what the gateway holds a token to,
- * so an app builds that URL itself from the status's `clientId`.
- *
- * Throws a `TypeError` naming the fix when the client has no scope sets,
- * when the status isn't ready or has no `clientId`, when the status lacks
- * `scopes`, or when `params` names a parameter the helper sets.
- */
-export declare function authorizeUrl({ provider, status, redirectUri, state, codeChallenge, params, }: AuthorizeUrlOptions): URL;
-//# sourceMappingURL=authorizeUrl.d.ts.map

package/dist/server/authorizeUrl.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorizeUrl.d.ts","sourceRoot":"","sources":["../../src/server/authorizeUrl.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,uBAAuB,EAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAE1E,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,QAAQ,EAAE,uBAAuB,CAAC;IAClC,iFAAiF;IACjF,MAAM,EAAE,4BAA4B,CAAC;IACrC,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAgCD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,MAAM,EACN,WAAW,EACX,KAAK,EACL,aAAa,EACb,MAAM,GACP,EAAE,mBAAmB,GAAG,GAAG,CAqD3B"}

package/dist/server/authorizeUrl.js

@@ -1,106 +0,0 @@
-import { CAPABILITIES, ConfigurationError, } from "../internal/index.js";
-/**
- * Parameters the helper owns: the status decides the scopes, the caller's
- * other arguments decide the rest (PKCE from `codeChallenge`, always as
- * S256), each provider's own are fixed (Google's `access_type=offline` is
- * what gets a refresh token, Microsoft's `response_mode=query` is what
- * the callback reads), and Google's `include_granted_scopes` would widen
- * the token to every scope the person ever granted this client, which the
- * gateway refuses (`integration_scope_exceeded`).
- */
-const RESERVED_PARAMS = [
-    "scope",
-    "user_scope",
-    "client_id",
-    "redirect_uri",
-    "state",
-    "response_type",
-    "code_challenge",
-    "code_challenge_method",
-    "access_type",
-    "response_mode",
-    "include_granted_scopes",
-];
-/** The OAuth clients with scope sets: the ones this helper builds for. */
-function scopedClientIds() {
-    return Object.entries(CAPABILITIES)
-        .filter(([, found]) => found.mode === "oauth_client" && found.scopePolicy)
-        .map(([id]) => id);
-}
-/**
- * The provider's authorize URL to send a person to, for a client with
- * scope sets (`google-workspace`, `microsoft-365`, `slack`), built from the
- * capability's status: the registry's authorize endpoint (or the instance
- * the status names), `client_id`, `response_type=code`, `redirect_uri`,
- * `state`, and the scopes the status allows this app, which are exactly
- * what the gateway will let the token carry. Each provider's own needs
- * are added: Google's `access_type=offline` (a refresh token), Microsoft's
- * `response_mode=query`, Slack's comma-joined `scope` and its `user_scope`
- * (the status's `userScopes`, when the app's sets include a user set). With
- * `codeChallenge`, PKCE as S256. The app keeps its `state` and verifier
- * for the callback.
- *
- * A client without scope sets is refused: the
- * registry's checklist for one isn't what the gateway holds a token to,
- * so an app builds that URL itself from the status's `clientId`.
- *
- * Throws a `TypeError` naming the fix when the client has no scope sets,
- * when the status isn't ready or has no `clientId`, when the status lacks
- * `scopes`, or when `params` names a parameter the helper sets.
- */
-export function authorizeUrl({ provider, status, redirectUri, state, codeChallenge, params, }) {
-    const capability = oauthClientCapability(provider);
-    if (!capability.scopePolicy) {
-        throw new TypeError(`authorizeUrl() builds URLs for clients with scope sets (${scopedClientIds().join(", ")}); build ${capability.label}'s authorize URL yourself from the status's clientId.`);
-    }
-    if (!status.ready || !status.clientId) {
-        throw new TypeError(`authorizeUrl(${JSON.stringify(provider)}) needs a ready status with a clientId, and integrationStatus() answered ready: ${String(status.ready)}. Show ${capability.label} as not available instead: its operator sets the client up on the gateway, and an app lists the scope sets it uses in everyapp.config.ts.`);
-    }
-    if (!status.scopes) {
-        throw new TypeError(`authorizeUrl(${JSON.stringify(provider)}) takes ${capability.label}'s scopes from integrationStatus().scopes, which this status lacks: pass the status as the gateway (or everyapp dev) answered it.`);
-    }
-    for (const name of Object.keys(params ?? {})) {
-        if (!RESERVED_PARAMS.includes(name))
-            continue;
-        throw new TypeError(name === "include_granted_scopes"
-            ? `authorizeUrl(${JSON.stringify(provider)}): include_granted_scopes would widen the token to every scope the person granted this client, which the gateway refuses (integration_scope_exceeded); leave it out of params.`
-            : `authorizeUrl(${JSON.stringify(provider)}) sets ${name} itself; leave it out of params.`);
-    }
-    const url = new URL(capability.authorize.url);
-    // The status speaks for the gateway: its scopes are the token's ceiling.
-    const scopes = status.scopes;
-    const slack = url.host === "slack.com";
-    url.searchParams.set("client_id", status.clientId);
-    url.searchParams.set("response_type", "code");
-    url.searchParams.set("redirect_uri", redirectUri);
-    url.searchParams.set("state", state);
-    url.searchParams.set("scope", scopes.join(slack ? "," : " "));
-    if (status.userScopes && status.userScopes.length > 0) {
-        url.searchParams.set("user_scope", status.userScopes.join(","));
-    }
-    if (codeChallenge) {
-        url.searchParams.set("code_challenge", codeChallenge);
-        url.searchParams.set("code_challenge_method", "S256");
-    }
-    if (url.host === "accounts.google.com") {
-        // Without it Google issues no refresh token.
-        url.searchParams.set("access_type", "offline");
-    }
-    else if (url.host === "login.microsoftonline.com") {
-        url.searchParams.set("response_mode", "query");
-    }
-    for (const [name, value] of Object.entries(params ?? {})) {
-        url.searchParams.set(name, value);
-    }
-    return url;
-}
-/** The OAuth client `provider` names, from plain JavaScript or a stale type too. */
-function oauthClientCapability(provider) {
-    const found = Object.hasOwn(CAPABILITIES, provider)
-        ? CAPABILITIES[provider]
-        : undefined;
-    if (found?.mode !== "oauth_client") {
-        throw new ConfigurationError(`${JSON.stringify(String(provider))} isn't an OAuth client the gateway holds.`);
-    }
-    return found;
-}