@every-app/sdk 0.3.0-rc.13 → 0.3.0-rc.15

package/dist/server/integrationFetch.js

@@ -1,4 +1,4 @@
-import { APP_ID_ENV, CATALOG, ConfigurationError, GATEWAY_ERROR_HEADER, INTEGRATION_PROXY_PREFIX, apiKeyHosts, authorizationFor, capabilitySettings, devProviderFile, integrationProxyPath, providerSettingPrefix, resolveDevProvider, EMAIL_SENDERS_ENV, chooseEmailProvider, parseEmailList, parseEmailSender, } from "../internal/index.js";
+import { APP_ID_ENV, CATALOG, ConfigurationError, GATEWAY_ERROR_HEADER, INTEGRATION_PROXY_PREFIX, oauthPreset, apiKeyHosts, authorizationFor, capabilitySettings, devProviderFile, integrationProxyPath, providerSettingPrefix, resolveDevProvider, EMAIL_SENDERS_ENV, chooseEmailProvider, parseEmailList, parseEmailSender, } from "../internal/index.js";
 import { applyAttribution, attributionFor, } from "./attribution.js";
 import { connectPath } from "./connectUrl.js";
 import { BINDING_ORIGIN, gatewayBinding, streamingRequest, } from "./gatewayFetch.js";
@@ -278,7 +278,9 @@ async function readIntegrationStatus({ env, provider, for: explicitTarget, }) {
     // without one, the catalog, or in local dev the row's spec from
     // `.everyapp/providers/<id>.json`.
     const integration = binding && typeof binding.fetch === "function"
-        ? CATALOG.get(String(provider))
+        ? (CATALOG.get(String(provider)) ??
+            oauthPreset(String(provider)) ??
+            undefined)
         : (CATALOG.get(String(provider)) ??
             devRegisteredProvider(String(provider), values));
     if (integration?.mode === "ai") {

package/dist/server/tools.d.ts

@@ -26,8 +26,11 @@
  */
 import { type EveryAppUser, type ToolCallResultV1, type ToolDescriptorV1, type ToolIssueV1, type ToolRisk } from "../internal/index.js";
 import type { ExecutionContextLike } from "./everyApp.js";
-/** Reported with every catalog; must match package.json. */
-export declare const SDK_VERSION = "0.3.0";
+/**
+ * Reported with every catalog; must match package.json (a test checks).
+ * scripts/publish-rc.mjs sets both for the build it publishes.
+ */
+export declare const SDK_VERSION = "0.3.0-rc.15";
 /**
  * Throw from a tool handler to return an error the model can read and act on
  * ("No todo with that id"). Any other error is logged here and reaches the

package/dist/server/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/server/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D,4DAA4D;AAC5D,eAAO,MAAM,WAAW,UAAU,CAAC;AASnC;;;;GAIG;AACH,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAID,KAAK,mBAAmB,GAAG,WAAW,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvE,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;CAChE;AAED,KAAK,cAAc,CAAC,MAAM,IACtB;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,CAAA;CAAE,CAAC;AAEtD,UAAU,mBAAmB,CAAC,KAAK,EAAE,MAAM;IACzC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,CAAC,EACX;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAClD,SAAS,CAAC;CACf;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,kFAAkF;AAClF,MAAM,WAAW,sBAAsB,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,KAAK;IACrE,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG;QACzD,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;KAClD,CAAC;CACH;AAED,+EAA+E;AAC/E,MAAM,WAAW,eAAe,CAAC,MAAM,GAAG,OAAO;IAC/C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,QAAQ,CACN,KAAK,EAAE,OAAO,GACb,cAAc,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;CAC7D;AAED,MAAM,MAAM,UAAU,CAAC,MAAM,GAAG,OAAO,IACnC,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,GACvC,eAAe,CAAC,MAAM,CAAC,CAAC;AAE5B,gEAAgE;AAChE,MAAM,WAAW,WAAW,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG;IAChD;;;OAGG;IACH,IAAI,EAAE,YAAY,CAAC;IACnB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,oBAAoB,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc,CAAC,MAAM,GAAG,OAAO;IAC9C,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,IAAI,EAAE,QAAQ,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iDAAiD;IACjD,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC;CAC3D;AAED,QAAA,MAAM,WAAW,eAAoC,CAAC;AAEtD,mEAAmE;AACnE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,GAAG,UAAU,CAMb;AAQD,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,4EAA4E;AAC5E,MAAM,WAAW,OAAO;IACtB,0BAA0B;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,UAAU,gBAAgB;IACxB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC/C,uDAAuD;IACvD,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CACjC;AAID,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAMnE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,KAAK,EAAE;KAAG,CAAC,IAAI,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CAAE,EAC3D,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CA+BT;AAuOD,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC;AAEzC,qCAAqC;AACrC,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EACrB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAQ/B;AAiBD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,gBAAgB,CAAC,CAuC3B"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/server/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,WAAW,gBAAgB,CAAC;AASzC;;;;GAIG;AACH,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAID,KAAK,mBAAmB,GAAG,WAAW,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvE,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;CAChE;AAED,KAAK,cAAc,CAAC,MAAM,IACtB;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,CAAA;CAAE,CAAC;AAEtD,UAAU,mBAAmB,CAAC,KAAK,EAAE,MAAM;IACzC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,CAAC,EACX;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAClD,SAAS,CAAC;CACf;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,kFAAkF;AAClF,MAAM,WAAW,sBAAsB,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,KAAK;IACrE,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG;QACzD,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;KAClD,CAAC;CACH;AAED,+EAA+E;AAC/E,MAAM,WAAW,eAAe,CAAC,MAAM,GAAG,OAAO;IAC/C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,QAAQ,CACN,KAAK,EAAE,OAAO,GACb,cAAc,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;CAC7D;AAED,MAAM,MAAM,UAAU,CAAC,MAAM,GAAG,OAAO,IACnC,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,GACvC,eAAe,CAAC,MAAM,CAAC,CAAC;AAE5B,gEAAgE;AAChE,MAAM,WAAW,WAAW,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG;IAChD;;;OAGG;IACH,IAAI,EAAE,YAAY,CAAC;IACnB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,oBAAoB,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc,CAAC,MAAM,GAAG,OAAO;IAC9C,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,IAAI,EAAE,QAAQ,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iDAAiD;IACjD,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC;CAC3D;AAED,QAAA,MAAM,WAAW,eAAoC,CAAC;AAEtD,mEAAmE;AACnE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,GAAG,UAAU,CAMb;AAQD,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,4EAA4E;AAC5E,MAAM,WAAW,OAAO;IACtB,0BAA0B;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,UAAU,gBAAgB;IACxB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC/C,uDAAuD;IACvD,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CACjC;AAID,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAMnE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,KAAK,EAAE;KAAG,CAAC,IAAI,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CAAE,EAC3D,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CA+BT;AAuOD,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC;AAEzC,qCAAqC;AACrC,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EACrB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAQ/B;AAiBD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,gBAAgB,CAAC,CAuC3B"}

package/dist/server/tools.js

@@ -25,8 +25,11 @@
  * `{ jsonSchema, validate }` pair. The SDK itself takes no dependency.
  */
 import { TOOL_NAME_PATTERN, catalogHash, isToolRisk, } from "../internal/index.js";
-/** Reported with every catalog; must match package.json. */
-export const SDK_VERSION = "0.3.0";
+/**
+ * Reported with every catalog; must match package.json (a test checks).
+ * scripts/publish-rc.mjs sets both for the build it publishes.
+ */
+export const SDK_VERSION = "0.3.0-rc.15";
 const JSON_SCHEMA_TARGET = "draft-2020-12";
 const DRAFT_2020_12 = "https://json-schema.org/draft/2020-12/schema";
 // The 2026-07-28 MCP revision lets a schema property ask clients to mirror an

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@every-app/sdk",
-  "version": "0.3.0-rc.13",
+  "version": "0.3.0-rc.15",
   "license": "MIT",
   "type": "module",
   "exports": {

package/dist/internal/oauthBuiltIns.d.ts

@@ -1,101 +0,0 @@
-/**
- * The OAuth providers every Gateway has built in, as `oauth2-user` specs:
- * the same JSON shape as the presets (./oauthPresets.ts) and a registered
- * row (`everyapp provider add`). What differs between Google, Microsoft
- * and Slack is here as data: the endpoints, the API hosts, how scopes are
- * separated and prefixed, the extra authorize parameters, how the account
- * is named, and the scopes a token may carry beyond what the app asked.
- * No code anywhere reads a provider id to decide anything.
- *
- * Pure data with no imports, so the catalog (./capabilities.ts) can build
- * its entries from it without an import cycle. Each spec parses with
- * `parseProviderSpec` and round-trips through `oauthSpecOf`
- * (oauthBuiltIns.test.ts).
- */
-export declare const BUILT_IN_OAUTH_SPECS: {
-    readonly "google-workspace": {
-        readonly id: "google-workspace";
-        readonly name: "Google";
-        readonly description: "Gmail, Calendar, Drive, Search Console, Analytics and the other Google APIs, as the person who connects.";
-        readonly docs: "https://console.cloud.google.com/apis/credentials";
-        readonly api: "https://developers.google.com/identity/protocols/oauth2/scopes";
-        readonly hosts: readonly ["gmail.googleapis.com", "www.googleapis.com", "searchconsole.googleapis.com", "analyticsdata.googleapis.com", "analyticsadmin.googleapis.com", "openidconnect.googleapis.com"];
-        readonly auth: {
-            readonly kind: "oauth2-user";
-            readonly authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth";
-            readonly tokenUrl: "https://oauth2.googleapis.com/token";
-            readonly clientId: "GOOGLE_WORKSPACE_CLIENT_ID";
-            readonly clientSecret: "GOOGLE_WORKSPACE_CLIENT_SECRET";
-            readonly inject: "form";
-            readonly pkce: true;
-            readonly scopeSeparator: "space";
-            readonly scopePrefix: "https://www.googleapis.com/auth/";
-            readonly authorizeParams: {
-                readonly access_type: "offline";
-                readonly prompt: "consent";
-            };
-            readonly identity: {
-                readonly url: "https://openidconnect.googleapis.com/v1/userinfo";
-                readonly label: "email";
-                readonly id: "sub";
-                readonly scopes: readonly ["openid", "email"];
-            };
-            readonly tolerated: readonly ["profile", "https://www.googleapis.com/auth/userinfo.email", "https://www.googleapis.com/auth/userinfo.profile"];
-        };
-        readonly hint: "A Web application OAuth client in Google Cloud, with the Gateway's callback as its redirect URI and the scopes your apps list on its consent screen.";
-    };
-    readonly "microsoft-365": {
-        readonly id: "microsoft-365";
-        readonly name: "Microsoft 365";
-        readonly description: "Outlook mail and calendar, OneDrive and the rest of Microsoft Graph, as the person who connects.";
-        readonly docs: "https://entra.microsoft.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade";
-        readonly api: "https://learn.microsoft.com/graph/permissions-reference";
-        readonly hosts: readonly ["graph.microsoft.com"];
-        readonly auth: {
-            readonly kind: "oauth2-user";
-            readonly authorizeUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize";
-            readonly tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token";
-            readonly clientId: "MICROSOFT_365_CLIENT_ID";
-            readonly clientSecret: "MICROSOFT_365_CLIENT_SECRET";
-            readonly inject: "form";
-            readonly pkce: true;
-            readonly scopeSeparator: "space";
-            readonly scopePrefix: "https://graph.microsoft.com/";
-            readonly identity: {
-                readonly url: "https://graph.microsoft.com/v1.0/me";
-                readonly label: "userPrincipalName";
-                readonly id: "id";
-                readonly scopes: readonly ["User.Read", "offline_access"];
-            };
-            readonly tolerated: readonly ["openid", "profile", "email"];
-        };
-        readonly hint: "An app registration in Entra for accounts in any organization and personal accounts, with the Gateway's callback as a Web redirect URI. If two apps share this client with different scopes, Microsoft may hand back both apps' scopes and the Gateway refuses the token: give each app its own client.";
-    };
-    readonly slack: {
-        readonly id: "slack";
-        readonly name: "Slack";
-        readonly description: "Channels, members and messages, as the Slack app.";
-        readonly docs: "https://api.slack.com/apps";
-        readonly api: "https://api.slack.com/scopes";
-        readonly hosts: readonly ["slack.com"];
-        readonly auth: {
-            readonly kind: "oauth2-user";
-            readonly authorizeUrl: "https://slack.com/oauth/v2/authorize";
-            readonly tokenUrl: "https://slack.com/api/oauth.v2.access";
-            readonly revokeUrl: "https://slack.com/api/auth.revoke";
-            readonly clientId: "SLACK_CLIENT_ID";
-            readonly clientSecret: "SLACK_CLIENT_SECRET";
-            readonly inject: "form";
-            readonly pkce: false;
-            readonly scopeSeparator: "comma";
-            readonly identity: {
-                readonly url: "https://slack.com/api/auth.test";
-                readonly label: "team";
-                readonly id: "team_id";
-            };
-        };
-        readonly hint: "A Slack app with the Gateway's callback as its redirect URL and the bot scopes your apps list. The Gateway takes its Client ID and Client Secret, not a bot token (xoxb-).";
-    };
-};
-export type BuiltInOAuthId = keyof typeof BUILT_IN_OAUTH_SPECS;
-//# sourceMappingURL=oauthBuiltIns.d.ts.map

package/dist/internal/oauthBuiltIns.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauthBuiltIns.d.ts","sourceRoot":"","sources":["../../src/internal/oauthBuiltIns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8GvB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,oBAAoB,CAAC"}

package/dist/internal/oauthBuiltIns.js

@@ -1,122 +0,0 @@
-/**
- * The OAuth providers every Gateway has built in, as `oauth2-user` specs:
- * the same JSON shape as the presets (./oauthPresets.ts) and a registered
- * row (`everyapp provider add`). What differs between Google, Microsoft
- * and Slack is here as data: the endpoints, the API hosts, how scopes are
- * separated and prefixed, the extra authorize parameters, how the account
- * is named, and the scopes a token may carry beyond what the app asked.
- * No code anywhere reads a provider id to decide anything.
- *
- * Pure data with no imports, so the catalog (./capabilities.ts) can build
- * its entries from it without an import cycle. Each spec parses with
- * `parseProviderSpec` and round-trips through `oauthSpecOf`
- * (oauthBuiltIns.test.ts).
- */
-export const BUILT_IN_OAUTH_SPECS = {
-    // One Google Cloud project's OAuth client: Gmail, Calendar, Search
-    // Console, Analytics and any other Google API an app names a scope for.
-    "google-workspace": {
-        id: "google-workspace",
-        name: "Google",
-        description: "Gmail, Calendar, Drive, Search Console, Analytics and the other Google APIs, as the person who connects.",
-        docs: "https://console.cloud.google.com/apis/credentials",
-        api: "https://developers.google.com/identity/protocols/oauth2/scopes",
-        hosts: [
-            "gmail.googleapis.com",
-            "www.googleapis.com",
-            "searchconsole.googleapis.com",
-            "analyticsdata.googleapis.com",
-            "analyticsadmin.googleapis.com",
-            "openidconnect.googleapis.com",
-        ],
-        auth: {
-            kind: "oauth2-user",
-            authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth",
-            tokenUrl: "https://oauth2.googleapis.com/token",
-            clientId: "GOOGLE_WORKSPACE_CLIENT_ID",
-            clientSecret: "GOOGLE_WORKSPACE_CLIENT_SECRET",
-            inject: "form",
-            pkce: true,
-            scopeSeparator: "space",
-            // An app writes `gmail.modify`; the authorize URL carries the full
-            // `https://www.googleapis.com/auth/gmail.modify`.
-            scopePrefix: "https://www.googleapis.com/auth/",
-            // A refresh token needs `access_type=offline`; `prompt=consent`
-            // makes Google issue one on every connect.
-            authorizeParams: { access_type: "offline", prompt: "consent" },
-            identity: {
-                url: "https://openidconnect.googleapis.com/v1/userinfo",
-                label: "email",
-                id: "sub",
-                scopes: ["openid", "email"],
-            },
-            // Google answers `email` and `profile` as the userinfo URLs, and may
-            // add `profile` beside `openid`.
-            tolerated: [
-                "profile",
-                "https://www.googleapis.com/auth/userinfo.email",
-                "https://www.googleapis.com/auth/userinfo.profile",
-            ],
-        },
-        hint: "A Web application OAuth client in Google Cloud, with the Gateway's callback as its redirect URI and the scopes your apps list on its consent screen.",
-    },
-    // The multi-tenant Entra endpoints: register the client for accounts in
-    // any organization and personal accounts.
-    "microsoft-365": {
-        id: "microsoft-365",
-        name: "Microsoft 365",
-        description: "Outlook mail and calendar, OneDrive and the rest of Microsoft Graph, as the person who connects.",
-        docs: "https://entra.microsoft.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade",
-        api: "https://learn.microsoft.com/graph/permissions-reference",
-        hosts: ["graph.microsoft.com"],
-        auth: {
-            kind: "oauth2-user",
-            authorizeUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
-            tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
-            clientId: "MICROSOFT_365_CLIENT_ID",
-            clientSecret: "MICROSOFT_365_CLIENT_SECRET",
-            inject: "form",
-            pkce: true,
-            scopeSeparator: "space",
-            // An app writes `Mail.Read`; Graph's scopes are fully qualified on
-            // the wire and may come back either way.
-            scopePrefix: "https://graph.microsoft.com/",
-            identity: {
-                url: "https://graph.microsoft.com/v1.0/me",
-                label: "userPrincipalName",
-                id: "id",
-                // `offline_access` is what makes Entra issue a refresh token.
-                scopes: ["User.Read", "offline_access"],
-            },
-            tolerated: ["openid", "profile", "email"],
-        },
-        hint: "An app registration in Entra for accounts in any organization and personal accounts, with the Gateway's callback as a Web redirect URI. If two apps share this client with different scopes, Microsoft may hand back both apps' scopes and the Gateway refuses the token: give each app its own client.",
-    },
-    // A Slack app's bot token: the top-level token of `oauth.v2.access`.
-    slack: {
-        id: "slack",
-        name: "Slack",
-        description: "Channels, members and messages, as the Slack app.",
-        docs: "https://api.slack.com/apps",
-        api: "https://api.slack.com/scopes",
-        hosts: ["slack.com"],
-        auth: {
-            kind: "oauth2-user",
-            authorizeUrl: "https://slack.com/oauth/v2/authorize",
-            tokenUrl: "https://slack.com/api/oauth.v2.access",
-            revokeUrl: "https://slack.com/api/auth.revoke",
-            clientId: "SLACK_CLIENT_ID",
-            clientSecret: "SLACK_CLIENT_SECRET",
-            inject: "form",
-            // Slack refuses `code_challenge`.
-            pkce: false,
-            scopeSeparator: "comma",
-            identity: {
-                url: "https://slack.com/api/auth.test",
-                label: "team",
-                id: "team_id",
-            },
-        },
-        hint: "A Slack app with the Gateway's callback as its redirect URL and the bot scopes your apps list. The Gateway takes its Client ID and Client Secret, not a bot token (xoxb-).",
-    },
-};