@every-app/sdk 0.3.0-rc.10 → 0.3.0-rc.11

package/dist/internal/catalog/index.d.ts

@@ -1206,6 +1206,41 @@ export declare const CATALOG_ENTRIES: {
         };
         readonly tags: readonly ["weather", "forecast"];
     };
+    readonly daytona: {
+        readonly mode: "api_key";
+        readonly label: "Daytona";
+        readonly description: "Sandboxes for running code: create, start, stop, archive and delete sandboxes, and manage their snapshots and volumes.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "DAYTONA_API_KEY";
+        };
+        readonly docs: "https://www.daytona.io/docs/en/api-keys/";
+        readonly api: "https://www.daytona.io/docs/en/tools/api/";
+        readonly hosts: readonly ["app.daytona.io"];
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PUT", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["organizations"], readonly ["organization"], readonly ["billing"], readonly ["api-keys"], readonly ["users"], readonly ["audit"], readonly ["webhooks"], readonly ["secret"], readonly ["docker-registry"], readonly ["object-storage"], readonly ["regions"], readonly ["runners"], readonly ["for-runner"], readonly ["jobs"], readonly ["warm-pools"], readonly ["preview"], readonly ["ssh-access", "validate"]];
+        readonly hint: "An API key from the Daytona dashboard's Keys page, with only the permissions the apps need; the Gateway sends it as a bearer token to app.daytona.io. Any key of an organization reaches every running sandbox in it, so give the Gateway a Daytona organization of its own.";
+        readonly secrets: readonly [{
+            readonly name: "DAYTONA_API_KEY";
+            readonly hint: "An API key from the Daytona dashboard's Keys page: write:sandboxes and delete:sandboxes (and the snapshot or volume ones) only if an app needs them, and never manage:api_keys, manage:secrets, manage:billing or the region and runner permissions.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly path: "/api/sandbox";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "Lists the organization's sandboxes; any key may read them.";
+        };
+        readonly example: "start a sandbox from my snapshot and stop it when the run is done";
+        readonly verified: {
+            readonly on: "2026-11-01";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["sandbox", "compute", "hosting"];
+    };
     readonly postmark: {
         readonly mode: "api_key";
         readonly label: "Postmark";

package/dist/internal/catalog/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal/catalog/index.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMlB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal/catalog/index.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMlB,CAAC"}

package/dist/internal/catalog/infra.d.ts

@@ -419,5 +419,40 @@ export declare const INFRA: {
         };
         readonly tags: readonly ["weather", "forecast"];
     };
+    readonly daytona: {
+        readonly mode: "api_key";
+        readonly label: "Daytona";
+        readonly description: "Sandboxes for running code: create, start, stop, archive and delete sandboxes, and manage their snapshots and volumes.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "DAYTONA_API_KEY";
+        };
+        readonly docs: "https://www.daytona.io/docs/en/api-keys/";
+        readonly api: "https://www.daytona.io/docs/en/tools/api/";
+        readonly hosts: readonly ["app.daytona.io"];
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PUT", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["organizations"], readonly ["organization"], readonly ["billing"], readonly ["api-keys"], readonly ["users"], readonly ["audit"], readonly ["webhooks"], readonly ["secret"], readonly ["docker-registry"], readonly ["object-storage"], readonly ["regions"], readonly ["runners"], readonly ["for-runner"], readonly ["jobs"], readonly ["warm-pools"], readonly ["preview"], readonly ["ssh-access", "validate"]];
+        readonly hint: "An API key from the Daytona dashboard's Keys page, with only the permissions the apps need; the Gateway sends it as a bearer token to app.daytona.io. Any key of an organization reaches every running sandbox in it, so give the Gateway a Daytona organization of its own.";
+        readonly secrets: readonly [{
+            readonly name: "DAYTONA_API_KEY";
+            readonly hint: "An API key from the Daytona dashboard's Keys page: write:sandboxes and delete:sandboxes (and the snapshot or volume ones) only if an app needs them, and never manage:api_keys, manage:secrets, manage:billing or the region and runner permissions.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly path: "/api/sandbox";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "Lists the organization's sandboxes; any key may read them.";
+        };
+        readonly example: "start a sandbox from my snapshot and stop it when the run is done";
+        readonly verified: {
+            readonly on: "2026-11-01";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["sandbox", "compute", "hosting"];
+    };
 };
 //# sourceMappingURL=infra.d.ts.map

package/dist/internal/catalog/infra.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infra.d.ts","sourceRoot":"","sources":["../../../src/internal/catalog/infra.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyiBmC,CAAC"}
+{"version":3,"file":"infra.d.ts","sourceRoot":"","sources":["../../../src/internal/catalog/infra.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4mBmC,CAAC"}

package/dist/internal/catalog/infra.js

@@ -540,4 +540,69 @@ export const INFRA = {
         },
         tags: ["weather", "forecast"],
     },
+    // Added 2026-11-01 from Daytona's OpenAPI spec (daytona.io/docs/openapi.json)
+    // and its API-key docs, for Birds' sandboxes (docs/design/
+    // 2026-11-birds-forcing-function.md, section 1.12). The control plane only:
+    // preview URLs (<port>-<id>.proxy.daytona.works, per-sandbox tokens) and
+    // the toolbox stay outside the proxy.
+    daytona: {
+        mode: "api_key",
+        label: "Daytona",
+        description: "Sandboxes for running code: create, start, stop, archive and delete sandboxes, and manage their snapshots and volumes.",
+        auth: { kind: "bearer", secret: "DAYTONA_API_KEY" },
+        docs: "https://www.daytona.io/docs/en/api-keys/",
+        api: "https://www.daytona.io/docs/en/tools/api/",
+        hosts: ["app.daytona.io"],
+        data: "account",
+        access: ["read", "write"],
+        readMethods: ["GET", "HEAD"],
+        writeMethods: ["POST", "PUT", "PATCH", "DELETE"],
+        // One key is the whole Daytona organization's. Refused: the
+        // organization itself (members, roles, invitations, SSO, usage and
+        // spend, its settings), billing, API keys, the signed-in user, the audit
+        // log, webhooks (which would send every sandbox event to a URL of the
+        // app's choosing), and what hands out the organization's credentials or
+        // runs its infrastructure: the organization's secrets, registry and
+        // object-storage push access, regions (which regenerate proxy and SSH
+        // keys), runners, jobs, warm pools, and the preview proxy's own checks.
+        accountWidePaths: [
+            ["organizations"],
+            ["organization"],
+            ["billing"],
+            ["api-keys"],
+            ["users"],
+            ["audit"],
+            ["webhooks"],
+            ["secret"],
+            ["docker-registry"],
+            ["object-storage"],
+            ["regions"],
+            ["runners"],
+            ["for-runner"],
+            ["jobs"],
+            ["warm-pools"],
+            ["preview"],
+            ["ssh-access", "validate"],
+        ],
+        hint: "An API key from the Daytona dashboard's Keys page, with only the permissions the apps need; the Gateway sends it as a bearer token to app.daytona.io. Any key of an organization reaches every running sandbox in it, so give the Gateway a Daytona organization of its own.",
+        secrets: [
+            {
+                name: "DAYTONA_API_KEY",
+                hint: "An API key from the Daytona dashboard's Keys page: write:sandboxes and delete:sandboxes (and the snapshot or volume ones) only if an app needs them, and never manage:api_keys, manage:secrets, manage:billing or the region and runner permissions.",
+            },
+        ],
+        smoke: {
+            method: "GET",
+            path: "/api/sandbox",
+            expect: [200],
+            free: true,
+            note: "Lists the organization's sandboxes; any key may read them.",
+        },
+        example: "start a sandbox from my snapshot and stop it when the run is done",
+        verified: {
+            on: "2026-11-01",
+            how: "docs",
+        },
+        tags: ["sandbox", "compute", "hosting"],
+    },
 };

package/dist/internal/events.d.ts

@@ -114,11 +114,62 @@ export declare const EVENT_PRIVATE_NAME_SUFFIXES: readonly string[];
  */
 export declare function isPrivateEventTargetName(host: string): boolean;
 /** The sinks a subscription delivers to. */
-export declare const EVENT_SINKS: readonly ["webhook", "email"];
+export declare const EVENT_SINKS: readonly ["webhook", "email", "app"];
 export type EventSink = (typeof EVENT_SINKS)[number];
 /** Whom the email sink mails: the organization's owners, or owners and admins. */
 export declare const EVENT_EMAIL_RECIPIENTS: readonly ["owners", "admins"];
 export type EventEmailRecipients = (typeof EVENT_EMAIL_RECIPIENTS)[number];
+/**
+ * The `app` sink (docs/design/2026-11-birds-decisions/app-event-sink.md):
+ * an app declares `events: { subscribe, why }` in its manifest, the deploy
+ * makes the subscription for the app's own organization, and the Gateway
+ * delivers over the app's service binding to {@link APP_EVENTS_PATH} with a
+ * system token of purpose `events.deliver`.
+ *
+ * Which events may reach an app is an **allowlist** of families, not a
+ * deny-list: a family added to the catalogue later reaches no app until it
+ * is added here on purpose. `token.*`, `subscription.*`, `provider.*`,
+ * `signin_provider.*`, `cap.*`, `ai.*`, `access.*` and `organization.*` are
+ * not on it, and `member.password_reset` is left out of `member.*`.
+ */
+export declare const APP_EVENTS_PATH = "/__everyapp/events";
+export declare const APP_SINK_EVENT_FAMILIES: readonly EventGroup[];
+/** Types of an allowed family that still never reach an app. */
+export declare const APP_SINK_EXCLUDED_TYPES: readonly string[];
+/** The most patterns one app's `events.subscribe` may list. */
+export declare const APP_SINK_PATTERNS_MAX = 25;
+/**
+ * Whether an event of this type may be delivered to an app at all: its
+ * family is on the allowlist and the type isn't excluded. Checked when the
+ * bus queues a delivery and again before each attempt, whatever the
+ * subscription's stored patterns say.
+ */
+export declare function appSinkTypeAllowed(type: string): boolean;
+/**
+ * What is wrong with a pattern an app's manifest subscribes to, or null: a
+ * well-formed pattern ({@link eventPatternProblem}) inside an allowed
+ * family. `*` and any pattern outside the families are refused at deploy.
+ */
+export declare function appSinkPatternProblem(pattern: string): string | null;
+/**
+ * What the Gateway POSTs to {@link APP_EVENTS_PATH}: the same envelope a
+ * webhook receives.
+ */
+export interface AppEventEnvelope {
+    id: string;
+    type: string;
+    version: number;
+    summary: string;
+    time: string;
+    gateway: string;
+    organization: {
+        id: string;
+        slug: string;
+        name: string;
+    };
+    actor: unknown;
+    data: Record<string, unknown>;
+}
 /**
  * A subscription pattern: `*` (everything but ping), an exact type, or a
  * prefix with `.*` (`member.*`, `app.*`, `app.crm.*`). `app.*` matches the

package/dist/internal/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/internal/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,cAAc,GACd,KAAK,GACL,KAAK,GACL,OAAO,GACP,MAAM,GACN,YAAY,GACZ,OAAO,GACP,QAAQ,GACR,iBAAiB,GACjB,SAAS,GACT,UAAU,GACV,cAAc,GACd,IAAI,GACJ,MAAM,CAAC;AAEX,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AASD;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,aAAa,EA6I/C,CAAC;AAIF,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAErE;AAED,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,QAA0C,CAAC;AAC9E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,+CAA+C;AAC/C,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMvD;AAED,uDAAuD;AACvD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAWhE;AAED,4DAA4D;AAC5D,eAAO,MAAM,wBAAwB,QAAW,CAAC;AACjD,4EAA4E;AAC5E,eAAO,MAAM,oBAAoB,QAAY,CAAC;AAC9C,gCAAgC;AAChC,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,sDAAsD;AACtD,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,sCAAsC;AACtC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,yCAAyC;AACzC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C;;;GAGG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,8DAA8D;AAC9D,eAAO,MAAM,cAAc,MAAM,CAAC;AAClC,4BAA4B;AAC5B,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,6BAA6B;AAC7B,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAElD,CAAC;AACF,eAAO,MAAM,2BAA2B,QAAmC,CAAC;AAC5E,+CAA+C;AAC/C,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAChD,wEAAwE;AACxE,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAClD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,mEAAmE;AACnE,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,qFAAqF;AACrF,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,kDAAkD;AAClD,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AAEX,wEAAwE;AACxE,eAAO,MAAM,oCAAoC,iCACjB,CAAC;AAEjC;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAWxD,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAK9D;AAED,4CAA4C;AAC5C,eAAO,MAAM,WAAW,+BAAgC,CAAC;AACzD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AACrD,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,+BAAgC,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAU1E;AAED,iEAAiE;AACjE,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAET;AAID;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAalE;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,QACkE,CAAC;AAEtG,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B,CAAC;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,GAAG,gBAAgB,CAAC,CAAC;AAqBvC;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,OAAO,EACb,QAAQ,SAA2B,GAClC,cAAc,CAmDhB;AAED,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,uBAAuB;AACvB,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAY5C"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/internal/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,cAAc,GACd,KAAK,GACL,KAAK,GACL,OAAO,GACP,MAAM,GACN,YAAY,GACZ,OAAO,GACP,QAAQ,GACR,iBAAiB,GACjB,SAAS,GACT,UAAU,GACV,cAAc,GACd,IAAI,GACJ,MAAM,CAAC;AAEX,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AASD;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,aAAa,EA6I/C,CAAC;AAIF,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAErE;AAED,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,QAA0C,CAAC;AAC9E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,+CAA+C;AAC/C,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMvD;AAED,uDAAuD;AACvD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAWhE;AAED,4DAA4D;AAC5D,eAAO,MAAM,wBAAwB,QAAW,CAAC;AACjD,4EAA4E;AAC5E,eAAO,MAAM,oBAAoB,QAAY,CAAC;AAC9C,gCAAgC;AAChC,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,sDAAsD;AACtD,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,sCAAsC;AACtC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,yCAAyC;AACzC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C;;;GAGG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,8DAA8D;AAC9D,eAAO,MAAM,cAAc,MAAM,CAAC;AAClC,4BAA4B;AAC5B,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,6BAA6B;AAC7B,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAElD,CAAC;AACF,eAAO,MAAM,2BAA2B,QAAmC,CAAC;AAC5E,+CAA+C;AAC/C,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAChD,wEAAwE;AACxE,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAClD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,mEAAmE;AACnE,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,qFAAqF;AACrF,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,kDAAkD;AAClD,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AAEX,wEAAwE;AACxE,eAAO,MAAM,oCAAoC,iCACjB,CAAC;AAEjC;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAWxD,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAK9D;AAED,4CAA4C;AAC5C,eAAO,MAAM,WAAW,sCAAuC,CAAC;AAChE,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AACrD,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,+BAAgC,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,uBAAuB,CAAC;AACpD,eAAO,MAAM,uBAAuB,EAAE,SAAS,UAAU,EAOxD,CAAC;AACF,gEAAgE;AAChE,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAEpD,CAAC;AACF,+DAA+D;AAC/D,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAQxC;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKxD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAapE;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAU1E;AAED,iEAAiE;AACjE,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAET;AAID;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAalE;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,QACkE,CAAC;AAEtG,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B,CAAC;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,GAAG,gBAAgB,CAAC,CAAC;AAqBvC;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,OAAO,EACb,QAAQ,SAA2B,GAClC,cAAc,CAmDhB;AAED,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,uBAAuB;AACvB,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAY5C"}

package/dist/internal/events.js

@@ -52,7 +52,7 @@ export const EVENT_TYPES = [
     entry("tool", "tool.error", "An AI client's tool call failed"),
     entry("connection", "connection.created", "An AI app was connected"),
     entry("connection", "connection.revoked", "An AI app connection was revoked"),
-    entry("connection", "connection.used", "Linked dev used the Gateway's services (first call of the day)"),
+    entry("connection", "connection.used", "Linked dev used the Gateway's services, or an app used a member's OAuth connection (first call of the day)"),
     entry("token", "token.created", "A personal access token was created"),
     entry("token", "token.revoked", "A personal access token was revoked"),
     entry("access", "access.changed", "Cloudflare Access was turned on or off"),
@@ -67,7 +67,7 @@ export const EVENT_TYPES = [
     entry("provider", "provider.added", "A provider was registered"),
     entry("provider", "provider.removed", "A provider was removed"),
     entry("provider", "provider.updated", "A provider's spec or OAuth client was replaced"),
-    entry("provider", "provider.connected", "Someone connected an account at an OAuth provider"),
+    entry("provider", "provider.connected", "Someone connected an account at an OAuth provider in an app"),
     entry("provider", "provider.disconnected", "An OAuth provider account was disconnected"),
     entry("provider", "provider.connection_expired", "An OAuth provider refused to refresh a connection; it needs reconnecting"),
     entry("subscription", "subscription.created", "An event subscription was added"),
@@ -203,9 +203,71 @@ export function isPrivateEventTargetName(host) {
     return EVENT_PRIVATE_NAME_SUFFIXES.some((suffix) => host === suffix || host.endsWith(`.${suffix}`));
 }
 /** The sinks a subscription delivers to. */
-export const EVENT_SINKS = ["webhook", "email"];
+export const EVENT_SINKS = ["webhook", "email", "app"];
 /** Whom the email sink mails: the organization's owners, or owners and admins. */
 export const EVENT_EMAIL_RECIPIENTS = ["owners", "admins"];
+/**
+ * The `app` sink (docs/design/2026-11-birds-decisions/app-event-sink.md):
+ * an app declares `events: { subscribe, why }` in its manifest, the deploy
+ * makes the subscription for the app's own organization, and the Gateway
+ * delivers over the app's service binding to {@link APP_EVENTS_PATH} with a
+ * system token of purpose `events.deliver`.
+ *
+ * Which events may reach an app is an **allowlist** of families, not a
+ * deny-list: a family added to the catalogue later reaches no app until it
+ * is added here on purpose. `token.*`, `subscription.*`, `provider.*`,
+ * `signin_provider.*`, `cap.*`, `ai.*`, `access.*` and `organization.*` are
+ * not on it, and `member.password_reset` is left out of `member.*`.
+ */
+export const APP_EVENTS_PATH = "/__everyapp/events";
+export const APP_SINK_EVENT_FAMILIES = [
+    "member",
+    "group",
+    "app",
+    "mcp_app",
+    "connection",
+    "tool",
+];
+/** Types of an allowed family that still never reach an app. */
+export const APP_SINK_EXCLUDED_TYPES = [
+    "member.password_reset",
+];
+/** The most patterns one app's `events.subscribe` may list. */
+export const APP_SINK_PATTERNS_MAX = 25;
+/** The family a type or pattern belongs to: its first segment. */
+function familyOf(typeOrPattern) {
+    const dot = typeOrPattern.indexOf(".");
+    return dot === -1 ? typeOrPattern : typeOrPattern.slice(0, dot);
+}
+/**
+ * Whether an event of this type may be delivered to an app at all: its
+ * family is on the allowlist and the type isn't excluded. Checked when the
+ * bus queues a delivery and again before each attempt, whatever the
+ * subscription's stored patterns say.
+ */
+export function appSinkTypeAllowed(type) {
+    if (APP_SINK_EXCLUDED_TYPES.includes(type))
+        return false;
+    return APP_SINK_EVENT_FAMILIES.includes(familyOf(type));
+}
+/**
+ * What is wrong with a pattern an app's manifest subscribes to, or null: a
+ * well-formed pattern ({@link eventPatternProblem}) inside an allowed
+ * family. `*` and any pattern outside the families are refused at deploy.
+ */
+export function appSinkPatternProblem(pattern) {
+    const problem = eventPatternProblem(pattern);
+    if (problem)
+        return problem;
+    if (APP_SINK_EXCLUDED_TYPES.includes(pattern)) {
+        return `"${pattern}" never reaches an app`;
+    }
+    if (pattern === "*" ||
+        !APP_SINK_EVENT_FAMILIES.includes(familyOf(pattern))) {
+        return `"${pattern}" can't reach an app: an app subscribes to ${APP_SINK_EVENT_FAMILIES.map((family) => `${family}.*`).join(", ")} (member.password_reset excepted)`;
+    }
+    return null;
+}
 /**
  * A subscription pattern: `*` (everything but ping), an exact type, or a
  * prefix with `.*` (`member.*`, `app.*`, `app.crm.*`). `app.*` matches the

package/dist/internal/oauthBuiltIns.d.ts

@@ -0,0 +1,101 @@
+/**
+ * The OAuth providers every Gateway has built in, as `oauth2-user` specs:
+ * the same JSON shape as the presets (./oauthPresets.ts) and a registered
+ * row (`everyapp provider add`). What differs between Google, Microsoft
+ * and Slack is here as data: the endpoints, the API hosts, how scopes are
+ * separated and prefixed, the extra authorize parameters, how the account
+ * is named, and the scopes a token may carry beyond what the app asked.
+ * No code anywhere reads a provider id to decide anything.
+ *
+ * Pure data with no imports, so the catalog (./capabilities.ts) can build
+ * its entries from it without an import cycle. Each spec parses with
+ * `parseProviderSpec` and round-trips through `oauthSpecOf`
+ * (oauthBuiltIns.test.ts).
+ */
+export declare const BUILT_IN_OAUTH_SPECS: {
+    readonly "google-workspace": {
+        readonly id: "google-workspace";
+        readonly name: "Google";
+        readonly description: "Gmail, Calendar, Drive, Search Console, Analytics and the other Google APIs, as the person who connects.";
+        readonly docs: "https://console.cloud.google.com/apis/credentials";
+        readonly api: "https://developers.google.com/identity/protocols/oauth2/scopes";
+        readonly hosts: readonly ["gmail.googleapis.com", "www.googleapis.com", "searchconsole.googleapis.com", "analyticsdata.googleapis.com", "analyticsadmin.googleapis.com", "openidconnect.googleapis.com"];
+        readonly auth: {
+            readonly kind: "oauth2-user";
+            readonly authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth";
+            readonly tokenUrl: "https://oauth2.googleapis.com/token";
+            readonly clientId: "GOOGLE_WORKSPACE_CLIENT_ID";
+            readonly clientSecret: "GOOGLE_WORKSPACE_CLIENT_SECRET";
+            readonly inject: "form";
+            readonly pkce: true;
+            readonly scopeSeparator: "space";
+            readonly scopePrefix: "https://www.googleapis.com/auth/";
+            readonly authorizeParams: {
+                readonly access_type: "offline";
+                readonly prompt: "consent";
+            };
+            readonly identity: {
+                readonly url: "https://openidconnect.googleapis.com/v1/userinfo";
+                readonly label: "email";
+                readonly id: "sub";
+                readonly scopes: readonly ["openid", "email"];
+            };
+            readonly tolerated: readonly ["profile", "https://www.googleapis.com/auth/userinfo.email", "https://www.googleapis.com/auth/userinfo.profile"];
+        };
+        readonly hint: "A Web application OAuth client in Google Cloud, with the Gateway's callback as its redirect URI and the scopes your apps list on its consent screen.";
+    };
+    readonly "microsoft-365": {
+        readonly id: "microsoft-365";
+        readonly name: "Microsoft 365";
+        readonly description: "Outlook mail and calendar, OneDrive and the rest of Microsoft Graph, as the person who connects.";
+        readonly docs: "https://entra.microsoft.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade";
+        readonly api: "https://learn.microsoft.com/graph/permissions-reference";
+        readonly hosts: readonly ["graph.microsoft.com"];
+        readonly auth: {
+            readonly kind: "oauth2-user";
+            readonly authorizeUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize";
+            readonly tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token";
+            readonly clientId: "MICROSOFT_365_CLIENT_ID";
+            readonly clientSecret: "MICROSOFT_365_CLIENT_SECRET";
+            readonly inject: "form";
+            readonly pkce: true;
+            readonly scopeSeparator: "space";
+            readonly scopePrefix: "https://graph.microsoft.com/";
+            readonly identity: {
+                readonly url: "https://graph.microsoft.com/v1.0/me";
+                readonly label: "userPrincipalName";
+                readonly id: "id";
+                readonly scopes: readonly ["User.Read", "offline_access"];
+            };
+            readonly tolerated: readonly ["openid", "profile", "email"];
+        };
+        readonly hint: "An app registration in Entra for accounts in any organization and personal accounts, with the Gateway's callback as a Web redirect URI. If two apps share this client with different scopes, Microsoft may hand back both apps' scopes and the Gateway refuses the token: give each app its own client.";
+    };
+    readonly slack: {
+        readonly id: "slack";
+        readonly name: "Slack";
+        readonly description: "Channels, members and messages, as the Slack app.";
+        readonly docs: "https://api.slack.com/apps";
+        readonly api: "https://api.slack.com/scopes";
+        readonly hosts: readonly ["slack.com"];
+        readonly auth: {
+            readonly kind: "oauth2-user";
+            readonly authorizeUrl: "https://slack.com/oauth/v2/authorize";
+            readonly tokenUrl: "https://slack.com/api/oauth.v2.access";
+            readonly revokeUrl: "https://slack.com/api/auth.revoke";
+            readonly clientId: "SLACK_CLIENT_ID";
+            readonly clientSecret: "SLACK_CLIENT_SECRET";
+            readonly inject: "form";
+            readonly pkce: false;
+            readonly scopeSeparator: "comma";
+            readonly identity: {
+                readonly url: "https://slack.com/api/auth.test";
+                readonly label: "team";
+                readonly id: "team_id";
+            };
+        };
+        readonly hint: "A Slack app with the Gateway's callback as its redirect URL and the bot scopes your apps list.";
+    };
+};
+export type BuiltInOAuthId = keyof typeof BUILT_IN_OAUTH_SPECS;
+//# sourceMappingURL=oauthBuiltIns.d.ts.map

package/dist/internal/oauthBuiltIns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthBuiltIns.d.ts","sourceRoot":"","sources":["../../src/internal/oauthBuiltIns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8GvB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,oBAAoB,CAAC"}

package/dist/internal/oauthBuiltIns.js

@@ -0,0 +1,122 @@
+/**
+ * The OAuth providers every Gateway has built in, as `oauth2-user` specs:
+ * the same JSON shape as the presets (./oauthPresets.ts) and a registered
+ * row (`everyapp provider add`). What differs between Google, Microsoft
+ * and Slack is here as data: the endpoints, the API hosts, how scopes are
+ * separated and prefixed, the extra authorize parameters, how the account
+ * is named, and the scopes a token may carry beyond what the app asked.
+ * No code anywhere reads a provider id to decide anything.
+ *
+ * Pure data with no imports, so the catalog (./capabilities.ts) can build
+ * its entries from it without an import cycle. Each spec parses with
+ * `parseProviderSpec` and round-trips through `oauthSpecOf`
+ * (oauthBuiltIns.test.ts).
+ */
+export const BUILT_IN_OAUTH_SPECS = {
+    // One Google Cloud project's OAuth client: Gmail, Calendar, Search
+    // Console, Analytics and any other Google API an app names a scope for.
+    "google-workspace": {
+        id: "google-workspace",
+        name: "Google",
+        description: "Gmail, Calendar, Drive, Search Console, Analytics and the other Google APIs, as the person who connects.",
+        docs: "https://console.cloud.google.com/apis/credentials",
+        api: "https://developers.google.com/identity/protocols/oauth2/scopes",
+        hosts: [
+            "gmail.googleapis.com",
+            "www.googleapis.com",
+            "searchconsole.googleapis.com",
+            "analyticsdata.googleapis.com",
+            "analyticsadmin.googleapis.com",
+            "openidconnect.googleapis.com",
+        ],
+        auth: {
+            kind: "oauth2-user",
+            authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+            tokenUrl: "https://oauth2.googleapis.com/token",
+            clientId: "GOOGLE_WORKSPACE_CLIENT_ID",
+            clientSecret: "GOOGLE_WORKSPACE_CLIENT_SECRET",
+            inject: "form",
+            pkce: true,
+            scopeSeparator: "space",
+            // An app writes `gmail.modify`; the authorize URL carries the full
+            // `https://www.googleapis.com/auth/gmail.modify`.
+            scopePrefix: "https://www.googleapis.com/auth/",
+            // A refresh token needs `access_type=offline`; `prompt=consent`
+            // makes Google issue one on every connect.
+            authorizeParams: { access_type: "offline", prompt: "consent" },
+            identity: {
+                url: "https://openidconnect.googleapis.com/v1/userinfo",
+                label: "email",
+                id: "sub",
+                scopes: ["openid", "email"],
+            },
+            // Google answers `email` and `profile` as the userinfo URLs, and may
+            // add `profile` beside `openid`.
+            tolerated: [
+                "profile",
+                "https://www.googleapis.com/auth/userinfo.email",
+                "https://www.googleapis.com/auth/userinfo.profile",
+            ],
+        },
+        hint: "A Web application OAuth client in Google Cloud, with the Gateway's callback as its redirect URI and the scopes your apps list on its consent screen.",
+    },
+    // The multi-tenant Entra endpoints: register the client for accounts in
+    // any organization and personal accounts.
+    "microsoft-365": {
+        id: "microsoft-365",
+        name: "Microsoft 365",
+        description: "Outlook mail and calendar, OneDrive and the rest of Microsoft Graph, as the person who connects.",
+        docs: "https://entra.microsoft.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade",
+        api: "https://learn.microsoft.com/graph/permissions-reference",
+        hosts: ["graph.microsoft.com"],
+        auth: {
+            kind: "oauth2-user",
+            authorizeUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
+            tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
+            clientId: "MICROSOFT_365_CLIENT_ID",
+            clientSecret: "MICROSOFT_365_CLIENT_SECRET",
+            inject: "form",
+            pkce: true,
+            scopeSeparator: "space",
+            // An app writes `Mail.Read`; Graph's scopes are fully qualified on
+            // the wire and may come back either way.
+            scopePrefix: "https://graph.microsoft.com/",
+            identity: {
+                url: "https://graph.microsoft.com/v1.0/me",
+                label: "userPrincipalName",
+                id: "id",
+                // `offline_access` is what makes Entra issue a refresh token.
+                scopes: ["User.Read", "offline_access"],
+            },
+            tolerated: ["openid", "profile", "email"],
+        },
+        hint: "An app registration in Entra for accounts in any organization and personal accounts, with the Gateway's callback as a Web redirect URI. If two apps share this client with different scopes, Microsoft may hand back both apps' scopes and the Gateway refuses the token: give each app its own client.",
+    },
+    // A Slack app's bot token: the top-level token of `oauth.v2.access`.
+    slack: {
+        id: "slack",
+        name: "Slack",
+        description: "Channels, members and messages, as the Slack app.",
+        docs: "https://api.slack.com/apps",
+        api: "https://api.slack.com/scopes",
+        hosts: ["slack.com"],
+        auth: {
+            kind: "oauth2-user",
+            authorizeUrl: "https://slack.com/oauth/v2/authorize",
+            tokenUrl: "https://slack.com/api/oauth.v2.access",
+            revokeUrl: "https://slack.com/api/auth.revoke",
+            clientId: "SLACK_CLIENT_ID",
+            clientSecret: "SLACK_CLIENT_SECRET",
+            inject: "form",
+            // Slack refuses `code_challenge`.
+            pkce: false,
+            scopeSeparator: "comma",
+            identity: {
+                url: "https://slack.com/api/auth.test",
+                label: "team",
+                id: "team_id",
+            },
+        },
+        hint: "A Slack app with the Gateway's callback as its redirect URL and the bot scopes your apps list.",
+    },
+};