@every-app/sdk 0.3.0-rc.10 → 0.3.0-rc.12

package/dist/internal/remoteMcp.js

@@ -147,11 +147,7 @@ export function reservedUpstreamHosts() {
                 hosts.add(host);
         }
         else if (capability.mode === "oauth_client") {
-            for (const endpoint of capability.token) {
-                if ("host" in endpoint && typeof endpoint.host === "string") {
-                    hosts.add(endpoint.host);
-                }
-            }
+            hosts.add(new URL(capability.flow.tokenUrl).hostname);
         }
     }
     return [...hosts].sort();
@@ -352,7 +348,7 @@ export function parseRemoteMcpBlock(raw) {
             if (!isToolRisk(override["risk"])) {
                 return {
                     ok: false,
-                    problem: `remote.tools.${name}.risk must be read, write or destructive`,
+                    problem: `remote.tools.${name}.risk must be read or write`,
                 };
             }
             out.risk = override["risk"];
@@ -451,12 +447,10 @@ export function remoteMcpAppManifest(input) {
 }
 /**
  * A tool's risk for the Gateway. An override wins; then the app's `read`
- * or `write` default; then the server's hints, read conservatively: an
- * explicit `readOnlyHint: true` is `read`, an explicit `destructiveHint:
- * true` is `destructive` (hidden until approvals exist), and anything
- * else, a missing hint included, is `write`. The spec's missing-means-true
- * default for `destructiveHint` is not followed: it would hide every
- * unhinted tool.
+ * or `write` default; then the server's hints: an explicit `readOnlyHint:
+ * true` is `read`, and anything else, a missing hint included, is `write`.
+ * A write tool keeps the server's `destructiveHint`, so clients still ask
+ * before calling it.
  */
 export function remoteToolRisk(hints, block, upstreamName) {
     const override = remoteToolOverride(block, upstreamName)?.risk;
@@ -467,9 +461,8 @@ export function remoteToolRisk(hints, block, upstreamName) {
     }
     if (hints?.readOnlyHint === true)
         return { risk: "read", source: "hint" };
-    if (hints?.destructiveHint === true) {
-        return { risk: "destructive", source: "hint" };
-    }
+    if (hints?.destructiveHint === true)
+        return { risk: "write", source: "hint" };
     return { risk: "write", source: "default" };
 }
 /** Whether the operator left the tool on (the default). */

package/dist/internal/tools.d.ts

@@ -4,7 +4,8 @@
  * gateway's service binding and never public:
  *
  *   POST /__everyapp/tools/list  x-everyapp-system JWT (purpose "tools.list")
- *   POST /__everyapp/tools/call  x-everyapp-identity JWT, chan "mcp" + tc claim
+ *   POST /__everyapp/tools/call  x-everyapp-identity JWT, chan "mcp"
+ *                                + tc claim
  *
  * MCP itself (protocol eras, headers, envelopes) stays in the gateway; apps
  * only ever speak this small versioned JSON shape. Both sides import the
@@ -14,19 +15,23 @@ export declare const TOOLS_PROTOCOL_VERSION = 1;
 export declare const TOOLS_PATH_PREFIX = "/__everyapp/tools";
 export declare const TOOLS_LIST_PATH = "/__everyapp/tools/list";
 export declare const TOOLS_CALL_PATH = "/__everyapp/tools/call";
-export declare const TOOL_RISKS: readonly ["read", "write", "destructive"];
+/**
+ * A tool reads or writes. A write tool that deletes or can't be undone also
+ * says `destructiveHint` in its annotations, so clients ask before calling.
+ */
+export declare const TOOL_RISKS: readonly ["read", "write"];
 export type ToolRisk = (typeof TOOL_RISKS)[number];
-/** Scopes the gateway mints on `chan: "mcp"` identities, one per risk. */
+/** Scopes the gateway mints on tool-call identities (`chan: "mcp"`), one per risk. */
 export declare const MCP_READ_SCOPE = "mcp:read";
 export declare const MCP_WRITE_SCOPE = "mcp:write";
-/** Never minted in v1: destructive tools are hidden until approvals exist. */
-export declare const MCP_DESTRUCTIVE_SCOPE = "mcp:destructive";
 /** Local tool names: lowercase snake_case, at most 48 characters. */
 export declare const TOOL_NAME_PATTERN: RegExp;
 export declare function isToolRisk(value: unknown): value is ToolRisk;
-/** The exact scope a `chan: "mcp"` identity must carry to call a tool. */
+/** The exact scope a tool-call identity must carry to call a tool. */
 export declare function requiredScopeForRisk(risk: ToolRisk): string;
 export interface ToolAnnotationsV1 {
+    /** A write tool deletes or can't be undone: clients ask before calling. */
+    destructiveHint?: boolean;
     idempotentHint?: boolean;
     openWorldHint?: boolean;
 }
@@ -55,7 +60,7 @@ export interface ToolsListResponseV1 {
     /** Tools the SDK left out because it can't describe them, and why. */
     warnings?: string[];
 }
-/** The `tc` identity claim: binds a `chan: "mcp"` token to one call. */
+/** The `tc` identity claim: binds a tool-call token (`chan: "mcp"`) to one call. */
 export interface ToolCallClaim {
     id: string;
     name: string;

package/dist/internal/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/internal/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,eAAO,MAAM,eAAe,2BAA8B,CAAC;AAC3D,eAAO,MAAM,eAAe,2BAA8B,CAAC;AAE3D,eAAO,MAAM,UAAU,2CAA4C,CAAC;AACpE,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,0EAA0E;AAC1E,eAAO,MAAM,cAAc,aAAa,CAAC;AACzC,eAAO,MAAM,eAAe,cAAc,CAAC;AAC3C,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAEvD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,QAA2B,CAAC;AAE1D,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAK5D;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAS3D;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,QAAQ,CAAC;IACf,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,CAAC,EAAE,CAAC,CAAC;CACN;AAED,MAAM,WAAW,mBAAmB;IAClC,CAAC,EAAE,CAAC,CAAC;IACL,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,MAAM,gBAAgB,GACxB,cAAc,GACd,mBAAmB,GACnB,iBAAiB,GACjB,WAAW,GACX,iBAAiB,GACjB,oBAAoB,GACpB,eAAe,CAAC;AAEpB,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,CAAC,EAAE,CAAC,CAAC;IACL,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,MAAM,mBAAmB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAE5E;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAaD;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACpC,GAAG,OAAO,CAAC,MAAM,CAAC,CAUlB"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/internal/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,eAAO,MAAM,eAAe,2BAA8B,CAAC;AAC3D,eAAO,MAAM,eAAe,2BAA8B,CAAC;AAE3D;;;GAGG;AACH,eAAO,MAAM,UAAU,4BAA6B,CAAC;AACrD,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,sFAAsF;AACtF,eAAO,MAAM,cAAc,aAAa,CAAC;AACzC,eAAO,MAAM,eAAe,cAAc,CAAC;AAE3C,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,QAA2B,CAAC;AAE1D,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAK5D;AAED,sEAAsE;AACtE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAO3D;AAED,MAAM,WAAW,iBAAiB;IAChC,2EAA2E;IAC3E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,QAAQ,CAAC;IACf,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,CAAC,EAAE,CAAC,CAAC;CACN;AAED,MAAM,WAAW,mBAAmB;IAClC,CAAC,EAAE,CAAC,CAAC;IACL,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,MAAM,gBAAgB,GACxB,cAAc,GACd,mBAAmB,GACnB,iBAAiB,GACjB,WAAW,GACX,iBAAiB,GACjB,oBAAoB,GACpB,eAAe,CAAC;AAEpB,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,CAAC,EAAE,CAAC,CAAC;IACL,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,MAAM,mBAAmB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAE5E;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAaD;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACpC,GAAG,OAAO,CAAC,MAAM,CAAC,CAUlB"}

package/dist/internal/tools.js

@@ -4,7 +4,8 @@
  * gateway's service binding and never public:
  *
  *   POST /__everyapp/tools/list  x-everyapp-system JWT (purpose "tools.list")
- *   POST /__everyapp/tools/call  x-everyapp-identity JWT, chan "mcp" + tc claim
+ *   POST /__everyapp/tools/call  x-everyapp-identity JWT, chan "mcp"
+ *                                + tc claim
  *
  * MCP itself (protocol eras, headers, envelopes) stays in the gateway; apps
  * only ever speak this small versioned JSON shape. Both sides import the
@@ -14,27 +15,27 @@ export const TOOLS_PROTOCOL_VERSION = 1;
 export const TOOLS_PATH_PREFIX = "/__everyapp/tools";
 export const TOOLS_LIST_PATH = `${TOOLS_PATH_PREFIX}/list`;
 export const TOOLS_CALL_PATH = `${TOOLS_PATH_PREFIX}/call`;
-export const TOOL_RISKS = ["read", "write", "destructive"];
-/** Scopes the gateway mints on `chan: "mcp"` identities, one per risk. */
+/**
+ * A tool reads or writes. A write tool that deletes or can't be undone also
+ * says `destructiveHint` in its annotations, so clients ask before calling.
+ */
+export const TOOL_RISKS = ["read", "write"];
+/** Scopes the gateway mints on tool-call identities (`chan: "mcp"`), one per risk. */
 export const MCP_READ_SCOPE = "mcp:read";
 export const MCP_WRITE_SCOPE = "mcp:write";
-/** Never minted in v1: destructive tools are hidden until approvals exist. */
-export const MCP_DESTRUCTIVE_SCOPE = "mcp:destructive";
 /** Local tool names: lowercase snake_case, at most 48 characters. */
 export const TOOL_NAME_PATTERN = /^[a-z][a-z0-9_]{0,47}$/;
 export function isToolRisk(value) {
     return (typeof value === "string" &&
         TOOL_RISKS.includes(value));
 }
-/** The exact scope a `chan: "mcp"` identity must carry to call a tool. */
+/** The exact scope a tool-call identity must carry to call a tool. */
 export function requiredScopeForRisk(risk) {
     switch (risk) {
         case "read":
             return MCP_READ_SCOPE;
         case "write":
             return MCP_WRITE_SCOPE;
-        case "destructive":
-            return MCP_DESTRUCTIVE_SCOPE;
     }
 }
 /**

package/dist/manifest.d.ts

@@ -12,7 +12,7 @@
  * Types only, and a leaf module: `cloudflare.config.ts` imports the manifest,
  * and the Cloudflare Vite plugin hides from the Worker every file the config
  * imports. The rules beyond the shape (which ids exist, which names are
- * reserved, which scope sets a provider has) are the CLI's: `everyapp deploy`
+ * reserved, which scopes a provider takes) are the CLI's: `everyapp deploy`
  * and `everyapp dev` validate the manifest and say what is wrong. The
  * perimeter's schema (`@every-app/perimeter/manifest`) is held to this type
  * by a test there.
@@ -37,6 +37,13 @@ export interface EveryAppPublicRoute {
     readonly path: string;
     /** The methods it answers; `["GET"]` when left out. */
     readonly methods?: readonly string[];
+    /**
+     * A bearer route: a native app or a script reaches it with its Gateway
+     * token only, on every method (no `methods`). The Gateway answers 401 to
+     * a request carrying its session cookie there, and Cloudflare Access
+     * lets it through like any public route.
+     */
+    readonly bearer?: true;
 }
 /** A Durable Object or Workflow class: its binding, the class, and the helper Worker that defines it. */
 export interface EveryAppClassResource {
@@ -104,12 +111,31 @@ export interface EveryAppResources {
         readonly name: string;
         readonly dataset?: string;
     }[];
+    readonly artifacts?: readonly {
+        readonly name: string;
+    }[];
 }
-/** One capability the Gateway serves the app with keys it holds. */
-export interface EveryAppCapabilityEntry extends EveryAppSettingNeed {
+/**
+ * One capability the Gateway serves the app with: an API-key provider or
+ * a service, by `access`; an OAuth provider, by the provider's own scopes.
+ */
+export type EveryAppCapabilityEntry = EveryAppKeyCapabilityEntry | EveryAppOAuthCapabilityEntry;
+/** A provider whose key the Gateway holds, or a Gateway service. */
+export interface EveryAppKeyCapabilityEntry extends EveryAppSettingNeed {
     readonly access: "read" | "write";
-    /** An OAuth client's scope sets, by name (`["gmail.read"]`). */
-    readonly scopes?: readonly string[];
+    readonly scopes?: never;
+}
+/**
+ * An OAuth provider (`google-workspace`, `github`): the provider's own
+ * scope strings the app needs, short (`gmail.modify`) or in full. A person
+ * connects in the app for exactly these; the Gateway adds the scopes that
+ * name the account, and refuses a token that carries more.
+ */
+export interface EveryAppOAuthCapabilityEntry extends EveryAppSettingNeed {
+    readonly scopes: readonly string[];
+    /** Why the app needs it, shown where people connect. At most 200 characters. */
+    readonly why: string;
+    readonly access?: never;
 }
 /**
  * One of the app's plain settings: a value that isn't a secret and
@@ -132,7 +158,7 @@ export interface EveryAppSettingEntry {
 /** One of the app's own secrets, with its need. */
 export interface EveryAppSecretEntry extends EveryAppSettingNeed {
     readonly name: string;
-    /** Its guide in the everyapp skill (`"setup/main-secret.md"`). */
+    /** Its setup guide, a path in the app (`"docs/setup/main-secret.md"`). */
     readonly setup?: string;
 }
 /** `everyapp.config.ts`. */
@@ -144,8 +170,6 @@ export interface EveryAppManifest {
     readonly description?: string;
     /** The path of an SVG the app serves (`"/everyapp-icon.svg"`). */
     readonly icon?: string;
-    /** Legacy: the entry comes from `cloudflare.config.ts`. */
-    readonly main?: string;
     /** YYYY-MM-DD. */
     readonly compatibilityDate?: string;
     readonly resources?: EveryAppResources;
@@ -168,18 +192,6 @@ export interface EveryAppManifest {
      * OG image): path patterns, GET and HEAD, never Worker code.
      */
     readonly publicAssets?: readonly string[];
-    /**
-     * Routes a bearer client (a native app, a script with a personal token)
-     * reaches with its token only: `paths` in `public`'s glob syntax, every
-     * method, and `why` the app needs them, shown to the operator. The
-     * Gateway answers 401 to a request carrying its session cookie there,
-     * and `everyapp access on` lets these paths through Cloudflare Access.
-     * Default: none.
-     */
-    readonly bearerRoutes?: {
-        readonly paths: readonly string[];
-        readonly why: string;
-    };
     /** AI providers the Gateway calls for the app, by id or with their need. */
     readonly providers?: readonly (string | (EveryAppSettingNeed & {
         readonly id: string;
@@ -197,7 +209,7 @@ export interface EveryAppManifest {
         readonly models?: readonly string[];
         /** OpenAI API paths beyond inference (`"/v1/files"`). */
         readonly routes?: readonly string[];
-        /** The app takes the Gateway's default chat model (`ai()`). */
+        /** The app takes the workspace's default chat model (`/api/ai/default`, `aiBaseUrl()`). */
         readonly chat?: boolean | EveryAppSettingNeed;
     };
     /** `inbound: true`: the Worker exports an `email()` handler. */
@@ -206,14 +218,10 @@ export interface EveryAppManifest {
     };
     /** Who can open the app once registered; `"admins"` by default. */
     readonly access?: "everyone" | "admins";
-    readonly serverFnGuard?: boolean;
-    readonly serverFnBase?: string;
     /** Shell command that builds the app; `cf build` by default. */
     readonly build?: string;
     /** Shell command `everyapp dev` starts; it must listen on PORT. */
     readonly dev?: string;
-    /** Legacy: the port comes from PORT. */
-    readonly devPort?: number;
     /** Dependency install command; false skips it. */
     readonly install?: false | string;
     readonly migrations?: {
@@ -223,9 +231,14 @@ export interface EveryAppManifest {
         readonly config?: string;
         readonly binding?: string;
     };
-    /** Who answers `/mcp` on the app's own host, and why it needs to. */
-    readonly mcp?: {
-        readonly by: "gateway" | "app";
+    /**
+     * The Gateway events the app receives at `everyApp(handler, { events: {
+     * on } })`: types or patterns from `member.*` (but `member.password_reset`),
+     * `group.*`, `app.*`, `mcp_app.*`, `connection.*` and `tool.*`, for the
+     * app's own organization. Anything else is refused at deploy.
+     */
+    readonly events?: {
+        readonly subscribe: readonly string[];
         readonly why: string;
     };
 }

package/dist/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,yEAAyE;IACzE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IAClC,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,yGAAyG;AACzG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,8CAA8C;AAC9C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,wDAAwD;AACxD,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;KACtC,EAAE,CAAC;IACJ,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,qBAAqB,CAAC;KAClD,EAAE,CAAC;IACJ,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,aAAa,CAAC;QACzD,kFAAkF;QAClF,QAAQ,CAAC,MAAM,CAAC,EACZ,4BAA4B,GAC5B,2BAA2B,GAC3B,4BAA4B,GAC5B,+BAA+B,GAC/B,gCAAgC,CAAC;KACtC,EAAE,CAAC;IACJ,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;QAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,EAAE,CAAC;IACJ,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;QACnD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KAC1D,EAAE,CAAC;IACJ,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7D,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS;QAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,EAAE,CAAC;CACL;AAED,oEAAoE;AACpE,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,gEAAgE;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;IACtD,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,mDAAmD;AACnD,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,4BAA4B;AAC5B,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB;IAClB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;KACxC,EAAE,CAAC;IACJ,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,IAAI,GAAG,UAAU,CAAC;QACrC,gDAAgD;QAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE;QACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAC1B,MAAM,GACN,CAAC,mBAAmB,GAAG;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAClD,EAAE,CAAC;IACJ,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,GAAG,uBAAuB,CAAA;KAAE,CAAC;IAC3E,yDAAyD;IACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,mBAAmB,CAAC,EAAE,CAAC;IAC7D,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACpD,QAAQ,CAAC,EAAE,CAAC,EAAE;QACZ,uEAAuE;QACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,yDAAyD;QACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,+DAA+D;QAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,mBAAmB,CAAC;KAC/C,CAAC;IACF,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAChD,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,kDAAkD;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;QAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,qEAAqE;IACrE,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,GAAG,KAAK,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACzE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,CAAC,CAAC,SAAS,gBAAgB,EAC7D,QAAQ,EAAE,CAAC,GACV,CAAC,CAEH"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,yEAAyE;IACzE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IAClC,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;CACxB;AAED,yGAAyG;AACzG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,8CAA8C;AAC9C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,wDAAwD;AACxD,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;KACtC,EAAE,CAAC;IACJ,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,qBAAqB,CAAC;KAClD,EAAE,CAAC;IACJ,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,aAAa,CAAC;QACzD,kFAAkF;QAClF,QAAQ,CAAC,MAAM,CAAC,EACZ,4BAA4B,GAC5B,2BAA2B,GAC3B,4BAA4B,GAC5B,+BAA+B,GAC/B,gCAAgC,CAAC;KACtC,EAAE,CAAC;IACJ,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;QAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,EAAE,CAAC;IACJ,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;QACnD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KAC1D,EAAE,CAAC;IACJ,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7D,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS;QAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,EAAE,CAAC;IACJ,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3D;AAED;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAC/B,0BAA0B,GAC1B,4BAA4B,CAAC;AAEjC,oEAAoE;AACpE,MAAM,WAAW,0BAA2B,SAAQ,mBAAmB;IACrE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,4BAA6B,SAAQ,mBAAmB;IACvE,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,gFAAgF;IAChF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;IACtD,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,mDAAmD;AACnD,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,4BAA4B;AAC5B,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB;IAClB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;KACxC,EAAE,CAAC;IACJ,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,IAAI,GAAG,UAAU,CAAC;QACrC,gDAAgD;QAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAC1B,MAAM,GACN,CAAC,mBAAmB,GAAG;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAClD,EAAE,CAAC;IACJ,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,GAAG,uBAAuB,CAAA;KAAE,CAAC;IAC3E,yDAAyD;IACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,mBAAmB,CAAC,EAAE,CAAC;IAC7D,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACpD,QAAQ,CAAC,EAAE,CAAC,EAAE;QACZ,uEAAuE;QACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,yDAAyD;QACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,2FAA2F;QAC3F,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,mBAAmB,CAAC;KAC/C,CAAC;IACF,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAChD,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IACxC,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;QAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;QACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,CAAC,CAAC,SAAS,gBAAgB,EAC7D,QAAQ,EAAE,CAAC,GACV,CAAC,CAEH"}

package/dist/manifest.js

@@ -12,7 +12,7 @@
  * Types only, and a leaf module: `cloudflare.config.ts` imports the manifest,
  * and the Cloudflare Vite plugin hides from the Worker every file the config
  * imports. The rules beyond the shape (which ids exist, which names are
- * reserved, which scope sets a provider has) are the CLI's: `everyapp deploy`
+ * reserved, which scopes a provider takes) are the CLI's: `everyapp deploy`
  * and `everyapp dev` validate the manifest and say what is wrong. The
  * perimeter's schema (`@every-app/perimeter/manifest`) is held to this type
  * by a test there.

package/dist/server/ai.d.ts

@@ -1,95 +1,3 @@
-/**
- * `ai()`: the Gateway's default chat model for an app that needs "a model"
- * rather than one provider (docs/design/2026-10-model-providers.md). The
- * manifest says `ai: { chat: true }` (or `{ chat: { why } }`); the Gateway's
- * operator decides which provider and model that is (`everyapp ai
- * default`, else OpenRouter → Workers AI → OpenAI → …, the first with its
- * key set), and the app never names either: it sends OpenAI-shaped chat
- * completions (and embeddings) to `/api/ai/default/v1/…` with `model:
- * "default"` or no model at all, and the Gateway fills the model in.
- *
- * An OpenAI client takes `baseURL` and `fetch` as they are:
- *
- *   const { baseURL, fetch, model } = ai({ env, for: request });
- *   const client = new OpenAI({ baseURL, fetch, apiKey: "gateway-managed" });
- *   await client.chat.completions.create({ model, messages });
- *
- * In local development with no Gateway, the developer's own key in
- * `.dev.vars` decides the provider by the same order (createGatewayFetch's
- * fallback). An app that needs one provider in particular keeps listing it
- * under `providers` and calling `/api/ai/<provider>/…`.
- */
-import { AI_DEFAULT_MODEL } from "../internal/index.js";
-import { type GatewayCallFor } from "./attribution.js";
-import { type CreateGatewayFetchOptions } from "./gatewayFetch.js";
-import type { SetupInfo } from "./refusal.js";
-export interface AiClient {
-    /** `http://every-app-gateway.internal/api/ai/default/v1`: an OpenAI client's base URL. */
-    baseURL: string;
-    /** The fetch that reaches the Gateway (or, in dev, the provider directly). */
-    fetch: typeof fetch;
-    /** The model name that means "whatever the Gateway's default is": `default`. */
-    model: typeof AI_DEFAULT_MODEL;
-    /** The default route's chat completions URL, for a plain `fetch`. */
-    chatCompletionsUrl: string;
-    /** The default route's embeddings URL, for a plain `fetch`. */
-    embeddingsUrl: string;
-}
-/** The base URL of the default route, as the SDK and the docs name it. */
-export declare const AI_DEFAULT_BASE_URL = "http://every-app-gateway.internal/api/ai/default/v1";
-/**
- * The Gateway's default chat model as a client: a base URL, a fetch and
- * the model name to send. Throws `ConfigurationError` where
- * `createGatewayFetch` does (no binding and no dev key) and
- * `AttributionError` where a shared app's call says nobody's.
- */
-export declare function ai(options: CreateGatewayFetchOptions & {
-    optional: true;
-}): AiClient | null;
-export declare function ai(options: CreateGatewayFetchOptions): AiClient;
-/** Whether model calls to a provider (or the default) would go through. */
-export interface AiStatus extends SetupInfo {
-    /** The id asked about: `default`, or a provider's (`openrouter`, `workers-ai`, …). */
-    provider: string;
-    /** The manifest asks for it: `ai.chat` for `default`, else `providers`. */
-    requested: boolean;
-    /** The Gateway (in local dev, `.dev.vars`) holds every setting it needs. */
-    configured: boolean;
-    /** Calls would go through. */
-    ready: boolean;
-    /**
-     * For `default`: the provider and model calls go to now, or null while
-     * none is configured. Null for a named provider.
-     */
-    resolved: {
-        provider: string;
-        label: string;
-        model: string;
-    } | null;
-}
-/**
- * Whether the app can use a model right now, without calling one: gate
- * an AI feature and show `setup` ("A chat model isn't set up on this
- * Gateway: it needs OPENROUTER_API_KEY. An admin runs: pnpm everyapp
- * configure inbox") up front instead of failing mid-task. `provider`
- * defaults to `default`, the Gateway's default model (`ai: { chat: true }`);
- * name one the manifest lists under `providers` to ask about it instead.
- * The Gateway owns the wording: show `setup` and `command` as they are.
- *
- * Over the binding it sends `GET /api/ai/<provider>`; in local dev it
- * answers from `.dev.vars` by the same rule `createGatewayFetch()` uses.
- */
-export declare function aiStatus({ env, provider, for: explicitTarget, }: {
-    env: object;
-    provider?: string;
-    /**
-     * Whom the status is for: the default resolves on that organization's
-     * choice (`everyapp ai default`). Left out, the request `everyApp()` is
-     * serving or the organization `withOrganization()` named, as on every
-     * call.
-     */
-    for?: GatewayCallFor;
-}): Promise<AiStatus>;
 /**
  * A provider's root behind the Gateway, `http://every-app-gateway.internal/api/ai/<provider>`:
  * join the provider's own paths onto it (`/api/v1/chat/completions` for
@@ -100,7 +8,7 @@ export declare function providerBaseUrl(provider: string): string;
 /**
  * The OpenAI-compatible base URL of `provider` behind the Gateway, for an
  * OpenAI client's `baseURL` (with `fetch: createGatewayFetch(...)`):
- * `default` (the default) is {@link AI_DEFAULT_BASE_URL},
+ * `default` (the default, and what it is when left out) is
  * `…/api/ai/default/v1`; a catalog provider's is its root and the prefix
  * of its chat route (`…/api/ai/openrouter/api/v1`, `…/api/ai/workers-ai/v1`,
  * `…/api/ai/openai/v1`). Throws `ConfigurationError` for a provider with

package/dist/server/ai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/server/ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACL,gBAAgB,EAOjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAIL,KAAK,yBAAyB,EAC/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,WAAW,QAAQ;IACvB,0FAA0F;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,gFAAgF;IAChF,KAAK,EAAE,OAAO,gBAAgB,CAAC;IAC/B,qEAAqE;IACrE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,wDAAuD,CAAC;AAExF;;;;;GAKG;AACH,wBAAgB,EAAE,CAChB,OAAO,EAAE,yBAAyB,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GACtD,QAAQ,GAAG,IAAI,CAAC;AACnB,wBAAgB,EAAE,CAAC,OAAO,EAAE,yBAAyB,GAAG,QAAQ,CAAC;AAajE,2EAA2E;AAC3E,MAAM,WAAW,QAAS,SAAQ,SAAS;IACzC,sFAAsF;IACtF,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,SAAS,EAAE,OAAO,CAAC;IACnB,4EAA4E;IAC5E,UAAU,EAAE,OAAO,CAAC;IACpB,8BAA8B;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACrE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,EAC7B,GAAG,EACH,QAA8B,EAC9B,GAAG,EAAE,cAAc,GACpB,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+EpB;AAID;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,QAAQ,GAAE,MAA4B,GAAG,MAAM,CAaxE"}
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/server/ai.ts"],"names":[],"mappings":"AA2BA;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,QAAQ,GAAE,MAA4B,GAAG,MAAM,CAaxE"}

package/dist/server/ai.js

@@ -1,116 +1,22 @@
 /**
- * `ai()`: the Gateway's default chat model for an app that needs "a model"
- * rather than one provider (docs/design/2026-10-model-providers.md). The
- * manifest says `ai: { chat: true }` (or `{ chat: { why } }`); the Gateway's
- * operator decides which provider and model that is (`everyapp ai
- * default`, else OpenRouter → Workers AI → OpenAI → …, the first with its
- * key set), and the app never names either: it sends OpenAI-shaped chat
- * completions (and embeddings) to `/api/ai/default/v1/…` with `model:
- * "default"` or no model at all, and the Gateway fills the model in.
+ * Where an app's model calls go behind the Gateway, for an OpenAI client's
+ * `baseURL` or a plain `fetch`, both sent with `createGatewayFetch()`:
+ * `aiBaseUrl("openai")` (a provider's OpenAI-compatible base), `aiBaseUrl()`
+ * (the Gateway's default model, `ai: { chat: true }`: send `model:
+ * "default"` or none and the Gateway fills in the workspace's model), and
+ * `providerBaseUrl("openai")` (a provider's root, for its own paths).
  *
- * An OpenAI client takes `baseURL` and `fetch` as they are:
- *
- *   const { baseURL, fetch, model } = ai({ env, for: request });
- *   const client = new OpenAI({ baseURL, fetch, apiKey: "gateway-managed" });
- *   await client.chat.completions.create({ model, messages });
- *
- * In local development with no Gateway, the developer's own key in
- * `.dev.vars` decides the provider by the same order (createGatewayFetch's
- * fallback). An app that needs one provider in particular keeps listing it
- * under `providers` and calling `/api/ai/<provider>/…`.
+ *   const client = new OpenAI({
+ *     baseURL: aiBaseUrl(),
+ *     fetch: createGatewayFetch({ env }),
+ *     apiKey: "gateway-managed",
+ *   });
+ *   await client.chat.completions.create({ model: "default", messages });
  */
-import { AI_DEFAULT_MODEL, AI_DEFAULT_PROVIDER, CATALOG, ConfigurationError, aiProviderSettings, devAiProvider, resolveAiDefault, } from "../internal/index.js";
-import { applyAttribution, attributionFor, } from "./attribution.js";
-import { BINDING_ORIGIN, createGatewayFetch, gatewayBinding, } from "./gatewayFetch.js";
-/** The base URL of the default route, as the SDK and the docs name it. */
-export const AI_DEFAULT_BASE_URL = `${BINDING_ORIGIN}/api/ai/${AI_DEFAULT_PROVIDER}/v1`;
-export function ai(options) {
-    const fetch = createGatewayFetch(options);
-    if (!fetch)
-        return null;
-    return {
-        baseURL: AI_DEFAULT_BASE_URL,
-        fetch,
-        model: AI_DEFAULT_MODEL,
-        chatCompletionsUrl: `${AI_DEFAULT_BASE_URL}/chat/completions`,
-        embeddingsUrl: `${AI_DEFAULT_BASE_URL}/embeddings`,
-    };
-}
-/**
- * Whether the app can use a model right now, without calling one: gate
- * an AI feature and show `setup` ("A chat model isn't set up on this
- * Gateway: it needs OPENROUTER_API_KEY. An admin runs: pnpm everyapp
- * configure inbox") up front instead of failing mid-task. `provider`
- * defaults to `default`, the Gateway's default model (`ai: { chat: true }`);
- * name one the manifest lists under `providers` to ask about it instead.
- * The Gateway owns the wording: show `setup` and `command` as they are.
- *
- * Over the binding it sends `GET /api/ai/<provider>`; in local dev it
- * answers from `.dev.vars` by the same rule `createGatewayFetch()` uses.
- */
-export async function aiStatus({ env, provider = AI_DEFAULT_PROVIDER, for: explicitTarget, }) {
-    const target = attributionFor(env, explicitTarget, "aiStatus");
-    const values = env;
-    const binding = gatewayBinding(env);
-    const unavailable = {
-        provider,
-        requested: false,
-        configured: false,
-        ready: false,
-        resolved: null,
-        settings: [],
-        setup: null,
-        command: null,
-    };
-    if (binding && typeof binding.fetch === "function") {
-        const headers = new Headers();
-        if (target !== undefined)
-            applyAttribution(headers, target);
-        const response = await binding.fetch(`${BINDING_ORIGIN}/api/ai/${encodeURIComponent(provider)}`, { headers });
-        if (!response.ok)
-            return unavailable;
-        const body = (await response.json());
-        return {
-            ...unavailable,
-            ...body,
-            provider,
-            settings: Array.isArray(body.settings) ? body.settings : [],
-            setup: typeof body.setup === "string" ? body.setup : null,
-            command: typeof body.command === "string" ? body.command : null,
-            resolved: body.resolved ?? null,
-        };
-    }
-    if (!values["EVERYAPP_DEV"])
-        return unavailable;
-    const isSet = (name) => typeof values[name] === "string" && values[name].trim() !== "";
-    const dev = (label, settings, configured, resolved, also = "") => ({
-        provider,
-        requested: true,
-        configured,
-        ready: configured,
-        resolved,
-        settings: configured ? [] : [...settings],
-        setup: configured
-            ? null
-            : `${label} isn't set up for local development: set ${settings.join(" and ")}${also} in .dev.vars.`,
-        command: null,
-    });
-    if (provider === AI_DEFAULT_PROVIDER) {
-        const resolution = resolveAiDefault({ provider: null, isSet });
-        return dev("A chat model", resolution.settings, resolution.configured, resolution.configured
-            ? {
-                provider: resolution.provider,
-                label: resolution.label,
-                model: resolution.model,
-            }
-            : null, " (or another model provider's key)");
-    }
-    const spec = devAiProvider(provider);
-    if (!spec)
-        return unavailable;
-    const settings = aiProviderSettings(spec);
-    return dev(CATALOG.get(provider)?.label ?? provider, settings, settings.every(isSet), null);
-}
+import { AI_DEFAULT_PROVIDER, CATALOG, ConfigurationError, } from "../internal/index.js";
+import { BINDING_ORIGIN } from "./gatewayFetch.js";
+/** The base URL of the default route, `…/api/ai/default/v1`. */
+const AI_DEFAULT_BASE_URL = `${BINDING_ORIGIN}/api/ai/${AI_DEFAULT_PROVIDER}/v1`;
 const CHAT_COMPLETIONS = "/chat/completions";
 /**
  * A provider's root behind the Gateway, `http://every-app-gateway.internal/api/ai/<provider>`:
@@ -124,7 +30,7 @@ export function providerBaseUrl(provider) {
 /**
  * The OpenAI-compatible base URL of `provider` behind the Gateway, for an
  * OpenAI client's `baseURL` (with `fetch: createGatewayFetch(...)`):
- * `default` (the default) is {@link AI_DEFAULT_BASE_URL},
+ * `default` (the default, and what it is when left out) is
  * `…/api/ai/default/v1`; a catalog provider's is its root and the prefix
  * of its chat route (`…/api/ai/openrouter/api/v1`, `…/api/ai/workers-ai/v1`,
  * `…/api/ai/openai/v1`). Throws `ConfigurationError` for a provider with

package/dist/server/attribution.d.ts

@@ -2,7 +2,7 @@
  * Whom a call through the gateway is for, which decides the organization
  * it counts against. Left out, it comes from the request context: the
  * request `everyApp()` is serving (its person, while the identity is good),
- * or the organization `withOrganization()` named. Given explicitly:
+ * or the organization the SDK's event delivery runs under. Given explicitly:
  *
  *  - the inbound `Request`: its person, by the identity the gateway put on
  *    it (forwarded as is);
@@ -12,10 +12,19 @@
  *    checks is active and has a live member. An organization's own app may
  *    leave it out (the gateway knows its organization) and may only name
  *    its own.
+ *  - `{ background: true, organizationId, userId }`: a call to an OAuth
+ *    provider's API (`integrationFetch`) on the connection member `userId`
+ *    made in this app, at any time, even while serving another person's
+ *    request: the call carries that member (`x-everyapp-user`) and never
+ *    the identity of the person being served. Only an organization's own
+ *    app may name a member, and only one who may still open the app. No
+ *    identity for the member reaches the app. Other gateway calls ignore
+ *    `userId`.
  */
 export type GatewayCallFor = Request | {
     background: true;
     organizationId?: string;
+    userId?: string;
 };
 /**
  * A gateway call that doesn't say whom it is for where it must: from a

package/dist/server/attribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attribution.d.ts","sourceRoot":"","sources":["../../src/server/attribution.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,cAAc,GACtB,OAAO,GACP;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,0BAA0B;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,cAAc,GAAG,SAAS,EAClC,IAAI,EAAE,MAAM,GACX,cAAc,GAAG,SAAS,CAI5B;AA8BD;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,cAAc,GAAG,SAAS,GACjC,IAAI,CAUN;AASD,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,CAO1D"}
+{"version":3,"file":"attribution.d.ts","sourceRoot":"","sources":["../../src/server/attribution.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,cAAc,GACtB,OAAO,GACP;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,0BAA0B;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,cAAc,GAAG,SAAS,EAClC,IAAI,EAAE,MAAM,GACX,cAAc,GAAG,SAAS,CAI5B;AAmCD;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,cAAc,GAAG,SAAS,GACjC,IAAI,CAYN;AASD,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,CAO1D"}