@every-app/sdk 0.3.0-rc.3 → 0.3.0-rc.5

package/dist/server/fromMcpTools.js

@@ -0,0 +1,192 @@
+/**
+ * `fromMcpTools()` — an app's existing MCP tools as `defineTools()` entries.
+ *
+ *   const tools: McpToolLike[] = [];
+ *   registerMyTools((name, config, handler) =>
+ *     tools.push({ name, ...config, handler }),
+ *   );
+ *   export default everyApp(handler, {
+ *     tools: defineTools(fromMcpTools(tools), { instructions }),
+ *   });
+ *
+ * Takes the shape `McpServer.registerTool(name, config, handler)` is called
+ * with (or what a low-level server's `tools/list` returns, plus a handler),
+ * structurally: the SDK takes no dependency on `@modelcontextprotocol/sdk`,
+ * and a live `McpServer` keeps its registry private, so the app hands over
+ * the list it registers from.
+ */
+import { TOOL_NAME_PATTERN } from "../internal/index.js";
+import { ToolError, toolResult, } from "./tools.js";
+const JSON_SCHEMA_TARGET = "draft-2020-12";
+/**
+ * Adapt MCP tools into `defineTools()` entries, keyed by tool name, to spread
+ * beside the app's own: `defineTools({ ...fromMcpTools(list), my_tool })`.
+ *
+ * - `title`, `description` (the name when absent), `idempotentHint` and
+ *   `openWorldHint` carry over; risk as {@link FromMcpToolsOptions.risk}.
+ * - A result's text blocks, joined by a blank line, are what the model
+ *   reads; `structuredContent` is sent as structured content (checked
+ *   against `outputSchema` when there is one). Other blocks are dropped.
+ * - `isError: true` becomes a {@link ToolError} with the result's text.
+ *
+ * Names must already be lowercase snake_case; `defineTools()` checks them.
+ */
+export function fromMcpTools(tools, options = {}) {
+    const out = {};
+    for (const tool of tools) {
+        const problem = (message) => new TypeError(`fromMcpTools: tool "${tool?.name}" ${message}`);
+        if (!tool || typeof tool.name !== "string") {
+            throw new TypeError("fromMcpTools: every tool needs a name");
+        }
+        if (!TOOL_NAME_PATTERN.test(tool.name)) {
+            throw problem("must be named in lowercase snake_case: a letter, then letters, digits or _ (at most 48 characters); rename it in the list");
+        }
+        if (Object.prototype.hasOwnProperty.call(out, tool.name)) {
+            throw problem("is listed twice");
+        }
+        if (typeof tool.handler !== "function") {
+            throw problem("needs a handler function");
+        }
+        const output = tool.outputSchema === undefined
+            ? undefined
+            : toToolSchema(tool.outputSchema, problem);
+        const annotations = tool.annotations ?? {};
+        const title = tool.title ?? annotations.title;
+        out[tool.name] = {
+            ...(title !== undefined ? { title } : {}),
+            description: tool.description?.trim() ? tool.description : tool.name,
+            risk: options.risk?.(tool) ?? defaultRisk(annotations),
+            input: toToolSchema(tool.inputSchema ?? {}, problem),
+            ...(output ? { output } : {}),
+            ...(annotations.idempotentHint !== undefined
+                ? { idempotent: annotations.idempotentHint }
+                : {}),
+            ...(annotations.openWorldHint !== undefined
+                ? { openWorld: annotations.openWorldHint }
+                : {}),
+            handler: async (args, context) => {
+                const extra = options.context
+                    ? await options.context(context)
+                    : context;
+                const result = await tool.handler(args, extra);
+                return fromCallToolResult(result);
+            },
+        };
+    }
+    return out;
+}
+function defaultRisk(annotations) {
+    if (annotations.readOnlyHint === true)
+        return "read";
+    return annotations.destructiveHint === true ? "destructive" : "write";
+}
+function fromCallToolResult(result) {
+    if (!isRecord(result)) {
+        throw new Error("the MCP tool did not return a CallToolResult");
+    }
+    const text = (Array.isArray(result.content) ? result.content : [])
+        .flatMap((part) => isRecord(part) && part.type === "text" && typeof part.text === "string"
+        ? [part.text]
+        : [])
+        .join("\n\n");
+    if (result.isError === true)
+        throw new ToolError(text || "The tool failed.");
+    const structured = result.structuredContent;
+    if (isRecord(structured) && !Array.isArray(structured)) {
+        return toolResult({ text, structured });
+    }
+    return text;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+function isStandardWithJson(value) {
+    if (!isRecord(value))
+        return false;
+    const standard = value["~standard"];
+    return (isRecord(standard) &&
+        typeof standard.validate === "function" &&
+        isRecord(standard.jsonSchema));
+}
+function isPlainToolSchema(value) {
+    return isRecord(value.jsonSchema) && typeof value.validate === "function";
+}
+function toToolSchema(schema, problem) {
+    if (!isRecord(schema) || Array.isArray(schema)) {
+        throw problem("has a schema that is not an object");
+    }
+    if (isStandardWithJson(schema) || isPlainToolSchema(schema)) {
+        return schema;
+    }
+    if ("~standard" in schema) {
+        throw problem("has a schema that doesn't convert to JSON Schema (zod >= 4.2 does)");
+    }
+    const values = Object.values(schema);
+    if (values.every((value) => isRecord(value) && "~standard" in value)) {
+        if (!values.every(isStandardWithJson)) {
+            throw problem("has a raw shape whose fields don't convert to JSON Schema (zod >= 4.2 does)");
+        }
+        return rawShapeSchema(schema);
+    }
+    return jsonSchemaOnly(schema);
+}
+/** A plain JSON Schema: described as is; any object passes. */
+function jsonSchemaOnly(jsonSchema) {
+    return {
+        jsonSchema,
+        validate: (value) => isRecord(value) && !Array.isArray(value)
+            ? { value }
+            : { issues: [{ message: "Expected an object" }] },
+    };
+}
+/**
+ * `{ key: schema }` as an object schema, the way `McpServer` wraps one in
+ * `z.object()`: unknown keys are dropped, and a field is optional when its
+ * schema accepts `undefined`.
+ */
+function rawShapeSchema(shape) {
+    const properties = {};
+    const required = [];
+    for (const [key, field] of Object.entries(shape)) {
+        const { $schema: _, ...property } = field["~standard"].jsonSchema.input({
+            target: JSON_SCHEMA_TARGET,
+        });
+        properties[key] = property;
+        const absent = field["~standard"].validate(undefined);
+        // An async validator can't be asked here; call the field required.
+        if (absent instanceof Promise || absent.issues)
+            required.push(key);
+    }
+    return {
+        jsonSchema: {
+            type: "object",
+            properties,
+            ...(required.length > 0 ? { required } : {}),
+        },
+        validate: async (value) => {
+            if (!isRecord(value) || Array.isArray(value)) {
+                return { issues: [{ message: "Expected an object" }] };
+            }
+            const parsed = {};
+            const issues = [];
+            for (const [key, field] of Object.entries(shape)) {
+                const result = await field["~standard"].validate(value[key]);
+                if (result.issues) {
+                    for (const issue of result.issues) {
+                        issues.push({
+                            message: issue.message,
+                            path: [
+                                key,
+                                ...(issue.path ?? []).map((segment) => typeof segment === "object" ? segment.key : segment),
+                            ],
+                        });
+                    }
+                }
+                else if (key in value || result.value !== undefined) {
+                    parsed[key] = result.value;
+                }
+            }
+            return issues.length > 0 ? { issues } : { value: parsed };
+        },
+    };
+}

package/dist/server/gatewayFetch.d.ts

@@ -3,27 +3,30 @@ export declare const BINDING_ORIGIN = "http://every-app-gateway.internal";
 export interface GatewayServiceBinding {
     fetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response>;
 }
-export interface GatewayFetchEnv {
-    EVERY_APP_GATEWAY?: GatewayServiceBinding;
-    EVERYAPP_DEV?: string | boolean;
-    /** `1` on a shared app's Workers (`everyAppWorker()` sets it). */
-    EVERYAPP_SHARED?: string;
-    OPENAI_API_KEY?: string;
-    OPENROUTER_API_KEY?: string;
-    /** Workers AI: an API token (Workers AI Read and Edit) and the account it bills. */
-    WORKERS_AI_API_TOKEN?: string;
-    CLOUDFLARE_ACCOUNT_ID?: string;
-}
 export interface CreateGatewayFetchOptions {
-    env: GatewayFetchEnv;
     /**
-     * Whom the call is for: the inbound request (its user), or
-     * `{ background: true, organizationId }` for work no person started
-     * (crons, Workflows, queues). An organization's own app may omit it for
-     * background work, which is then the app's; a shared app's Worker must
-     * pass one or the other ({@link AttributionError}).
+     * The Worker env, as it is: the EVERY_APP_GATEWAY binding when deployed,
+     * or in local dev EVERYAPP_DEV and the provider's settings in
+     * `.dev.vars` (`OPENROUTER_API_KEY`, …). No cast needed.
+     */
+    env: object;
+    /**
+     * Whom the call is for. Left out, the request `everyApp()` is serving
+     * (its user, while the identity is good) or the organization
+     * `withOrganization()` named; outside both, `RequestContextError`.
+     * Explicitly: the inbound request, or `{ background: true,
+     * organizationId }` for work no person started (crons, Workflows,
+     * queues). A shared app's Worker must end up with one or the other
+     * ({@link AttributionError}).
      */
     for?: GatewayCallFor;
+    /**
+     * `true`: answer null instead of throwing `ConfigurationError` when AI
+     * is unavailable (no binding, and in local dev no provider key), so a
+     * feature that can do without a model checks for null. A binding that
+     * isn't one, and an attribution mistake, still throw.
+     */
+    optional?: boolean;
 }
 /**
  * Create a fetch for the gateway's AI providers (`/api/ai/<provider>/…`),
@@ -31,7 +34,10 @@ export interface CreateGatewayFetchOptions {
  * developer's own provider key from `.dev.vars` is a direct-provider
  * fallback when no binding exists.
  */
-export declare function createGatewayFetch({ env, for: target, }: CreateGatewayFetchOptions): typeof fetch;
+export declare function createGatewayFetch(options: CreateGatewayFetchOptions & {
+    optional: true;
+}): typeof fetch | null;
+export declare function createGatewayFetch(options: CreateGatewayFetchOptions): typeof fetch;
 /** A copy of `source` aimed at `url`, streaming its body rather than buffering it. */
 export declare function streamingRequest(url: string, source: Request, headers: Headers): Request;
 //# sourceMappingURL=gatewayFetch.d.ts.map

package/dist/server/gatewayFetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gatewayFetch.d.ts","sourceRoot":"","sources":["../../src/server/gatewayFetch.ts"],"names":[],"mappings":"AAaA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,cAAc,sCAAsC,CAAC;AAGlE,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,eAAe;IAC9B,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,eAAe,CAAC;IACrB;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,EACjC,GAAG,EACH,GAAG,EAAE,MAAM,GACZ,EAAE,yBAAyB,GAAG,OAAO,KAAK,CAoE1C;AAwCD,sFAAsF;AACtF,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,OAAO,GACf,OAAO,CAUT"}
+{"version":3,"file":"gatewayFetch.d.ts","sourceRoot":"","sources":["../../src/server/gatewayFetch.ts"],"names":[],"mappings":"AAaA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,cAAc,sCAAsC,CAAC;AAGlE,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxE;AAeD,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;;OAQG;IACH,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,yBAAyB,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GACtD,OAAO,KAAK,GAAG,IAAI,CAAC;AACvB,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,yBAAyB,GACjC,OAAO,KAAK,CAAC;AAsHhB,sFAAsF;AACtF,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,OAAO,GACf,OAAO,CAUT"}

package/dist/server/gatewayFetch.js

@@ -1,24 +1,24 @@
 import { AI_DEFAULT_MODEL, AI_DEFAULT_PROVIDER, AI_DEFAULT_ROUTES, aiProviderSettings, authorizationOf, ConfigurationError, DEV_AI_PROVIDERS, devAiProvider, joinProviderUrl, resolveAiDefault, } from "../internal/index.js";
-import { applyAttribution, checkAttribution, } from "./attribution.js";
+import { applyAttribution, attributionFor, } from "./attribution.js";
 export const BINDING_ORIGIN = "http://every-app-gateway.internal";
 const AI_PROXY_PREFIX = "/api/ai/";
-/**
- * Create a fetch for the gateway's AI providers (`/api/ai/<provider>/…`),
- * backed by the private gateway service binding. In local dev only, the
- * developer's own provider key from `.dev.vars` is a direct-provider
- * fallback when no binding exists.
- */
-export function createGatewayFetch({ env, for: target, }) {
-    checkAttribution(env, target, "createGatewayFetch");
+export function createGatewayFetch({ env: workerEnv, for: explicitTarget, optional = false, }) {
+    const env = workerEnv;
+    // Checked now, so a call nobody's fails where the fetch is made; and
+    // again per call, where an identity may since have neared its expiry.
+    attributionFor(env, explicitTarget, "createGatewayFetch");
     const binding = env.EVERY_APP_GATEWAY;
     const devProviders = env.EVERYAPP_DEV ? localProviders(env) : {};
     if (binding && typeof binding.fetch !== "function") {
         throw new ConfigurationError("EVERY_APP_GATEWAY is configured but is not a valid service binding.");
     }
     if (!binding && Object.keys(devProviders).length === 0) {
+        if (optional)
+            return null;
         throw new ConfigurationError(`AI gateway unavailable: deploy with the EVERY_APP_GATEWAY binding, or set the provider's key (${listOf(Object.values(DEV_AI_PROVIDERS).map((spec) => settingsNames(spec, "with")), "or")}) in .dev.vars for direct local development.`);
     }
     return async (input, init) => {
+        const target = attributionFor(env, explicitTarget, "createGatewayFetch");
         const outbound = new Request(input, init);
         const headers = new Headers(outbound.headers);
         headers.delete("authorization");

package/dist/server/gatewayUrl.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The Gateway's URL, with `path` on it: `gatewayUrl(env)` for the launcher,
+ * `gatewayUrl(env, "/admin/users")` for the page where owners and admins
+ * invite people.
+ *
+ * Read from `env.GATEWAY_URL`, which the deploy sets on every Worker of the
+ * app and `everyapp dev` sets to its local launcher, so the same link works
+ * in both. `env` is the Worker's env (any object; only `GATEWAY_URL` is
+ * read). Throws {@link ConfigurationError} when it is unset or not an http(s)
+ * URL: a Worker no deploy or `everyapp dev` built.
+ */
+export declare function gatewayUrl(env: object, path?: string): string;
+//# sourceMappingURL=gatewayUrl.d.ts.map

package/dist/server/gatewayUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gatewayUrl.d.ts","sourceRoot":"","sources":["../../src/server/gatewayUrl.ts"],"names":[],"mappings":"AASA;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,SAAM,GAAG,MAAM,CAgB1D"}

package/dist/server/gatewayUrl.js

@@ -0,0 +1,34 @@
+/**
+ * `gatewayUrl()`: the one rule for a link from an app back to its Gateway
+ * ("‹ Every App", "Invite people", "Sign out").
+ */
+import { ConfigurationError } from "../internal/index.js";
+/** Where the Gateway is: the deploy sets it, and so does `everyapp dev`. */
+const GATEWAY_URL_ENV = "GATEWAY_URL";
+/**
+ * The Gateway's URL, with `path` on it: `gatewayUrl(env)` for the launcher,
+ * `gatewayUrl(env, "/admin/users")` for the page where owners and admins
+ * invite people.
+ *
+ * Read from `env.GATEWAY_URL`, which the deploy sets on every Worker of the
+ * app and `everyapp dev` sets to its local launcher, so the same link works
+ * in both. `env` is the Worker's env (any object; only `GATEWAY_URL` is
+ * read). Throws {@link ConfigurationError} when it is unset or not an http(s)
+ * URL: a Worker no deploy or `everyapp dev` built.
+ */
+export function gatewayUrl(env, path = "/") {
+    const value = env[GATEWAY_URL_ENV];
+    let base;
+    if (typeof value === "string" && value) {
+        try {
+            base = new URL(value);
+        }
+        catch {
+            base = undefined;
+        }
+    }
+    if (!base || (base.protocol !== "https:" && base.protocol !== "http:")) {
+        throw new ConfigurationError(`${GATEWAY_URL_ENV} is ${value ? "not an http(s) URL" : "unset"}: everyapp deploy and everyapp dev set it on the app's Worker.`);
+    }
+    return new URL(path, base.origin).toString();
+}

package/dist/server/index.d.ts

@@ -3,18 +3,26 @@
  *
  * There is intentionally no client-side export.
  */
-export { ConfigurationError, IdentityError, everyApp, getEveryAppUser, hasScope, requireEveryAppUser, type EveryAppOptions, type EveryAppManifestLike, type EveryAppHandler, type EveryAppUser, type IdentityResult, } from "./everyApp.js";
+export { ConfigurationError, IdentityError, everyApp, getEveryAppUser, hasScope, isAdmin, requireCurrentUser, requireEveryAppUser, type EveryAppOptions, type EveryAppManifestLike, type EveryAppHandler, type EveryAppUser, type IdentityResult, type OrgRole, } from "./everyApp.js";
+export { OrganizationMismatchError, RequestContextError, currentUser, withOrganization, } from "./context.js";
 export { AttributionError, type GatewayCallFor } from "./attribution.js";
+export { gatewayUrl } from "./gatewayUrl.js";
+export type { EveryAppEnv } from "./env.js";
+/** The header a Gateway refusal carries its code in; `gatewayRefusal()` reads the rest. */
+export { GATEWAY_ERROR_HEADER } from "../internal/protocol.js";
 export { authorizeUrl, type AuthorizeUrlOptions } from "./authorizeUrl.js";
 export { connectPath, connectUrl, type ConnectUrlOptions, } from "./connectUrl.js";
-export { createGatewayFetch, type CreateGatewayFetchOptions, type GatewayFetchEnv, } from "./gatewayFetch.js";
-export { ai, AI_DEFAULT_BASE_URL, type AiClient } from "./ai.js";
+export { createGatewayFetch, type CreateGatewayFetchOptions, } from "./gatewayFetch.js";
+export { ai, aiBaseUrl, providerBaseUrl, AI_DEFAULT_BASE_URL, type AiClient, } from "./ai.js";
 export { GatewayRefusalError, gatewayRefusal, devAccessTokenName, integrationFetch, integrationStatus, type EmailIntegrationStatus, type GatewayRefusal, type IntegrationFetchOptions, type IntegrationStatus, type IntegrationStatusOf, type OAuthClientIntegrationStatus, } from "./integrationFetch.js";
 export { nodeServerHandler, type NodeServer, type NodeServerHandlerOptions, } from "./nodeServer.js";
 export { sendEmail, type SendEmailOptions } from "./sendEmail.js";
+export { gatewayAiBinding, type GatewayAiBindingOptions } from "./aiBinding.js";
+export { gatewayEmailBinding, type GatewayEmailBindingMessage, type GatewayEmailBindingOptions, } from "./emailBinding.js";
 export { listMembers, type ListMembersOptions } from "./listMembers.js";
 export { emit, type EmitOptions } from "./emit.js";
 export type { ApiKeyCapabilityId, CapabilityId, OAuthClientCapabilityId, ConnectionAccount, EmailAddressInput, EmailAttachmentInput, SendEmailMessage, SendEmailResult, ListMembersResult, OrganizationMember, OrganizationMemberRole, EmitEventResult, } from "../internal/index.js";
 export { ToolError, defineTools, toolResult, type DefineToolsOptions, type PlainToolSchema, type StandardSchemaWithJSON, type ToolContext, type ToolDefinition, type ToolResult, type ToolSchema, type ToolSet, } from "./tools.js";
 export type { ToolRisk } from "../internal/index.js";
+export { fromMcpTools, type FromMcpToolsOptions, type McpToolAnnotationsLike, type McpToolLike, type McpToolResultLike, type McpToolSchemaLike, } from "./fromMcpTools.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,QAAQ,EACR,eAAe,EACf,QAAQ,EACR,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EACL,WAAW,EACX,UAAU,EACV,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,KAAK,yBAAyB,EAC9B,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,GAClC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,wBAAwB,GAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,YAAY,EACV,kBAAkB,EAClB,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,SAAS,EACT,WAAW,EACX,UAAU,EACV,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,GACb,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,QAAQ,EACR,eAAe,EACf,QAAQ,EACR,OAAO,EACP,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,OAAO,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,WAAW,EACX,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,2FAA2F;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EACL,WAAW,EACX,UAAU,EACV,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,EAAE,EACF,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,KAAK,QAAQ,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,GAClC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,wBAAwB,GAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,YAAY,EACV,kBAAkB,EAClB,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,SAAS,EACT,WAAW,EACX,UAAU,EACV,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,GACb,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,mBAAmB,CAAC"}

package/dist/server/index.js

@@ -3,15 +3,22 @@
  *
  * There is intentionally no client-side export.
  */
-export { ConfigurationError, IdentityError, everyApp, getEveryAppUser, hasScope, requireEveryAppUser, } from "./everyApp.js";
+export { ConfigurationError, IdentityError, everyApp, getEveryAppUser, hasScope, isAdmin, requireCurrentUser, requireEveryAppUser, } from "./everyApp.js";
+export { OrganizationMismatchError, RequestContextError, currentUser, withOrganization, } from "./context.js";
 export { AttributionError } from "./attribution.js";
+export { gatewayUrl } from "./gatewayUrl.js";
+/** The header a Gateway refusal carries its code in; `gatewayRefusal()` reads the rest. */
+export { GATEWAY_ERROR_HEADER } from "../internal/protocol.js";
 export { authorizeUrl } from "./authorizeUrl.js";
 export { connectPath, connectUrl, } from "./connectUrl.js";
 export { createGatewayFetch, } from "./gatewayFetch.js";
-export { ai, AI_DEFAULT_BASE_URL } from "./ai.js";
+export { ai, aiBaseUrl, providerBaseUrl, AI_DEFAULT_BASE_URL, } from "./ai.js";
 export { GatewayRefusalError, gatewayRefusal, devAccessTokenName, integrationFetch, integrationStatus, } from "./integrationFetch.js";
 export { nodeServerHandler, } from "./nodeServer.js";
 export { sendEmail } from "./sendEmail.js";
+export { gatewayAiBinding } from "./aiBinding.js";
+export { gatewayEmailBinding, } from "./emailBinding.js";
 export { listMembers } from "./listMembers.js";
 export { emit } from "./emit.js";
 export { ToolError, defineTools, toolResult, } from "./tools.js";
+export { fromMcpTools, } from "./fromMcpTools.js";

package/dist/server/integrationFetch.d.ts

@@ -17,11 +17,13 @@ export interface IntegrationFetchOptions {
      */
     provider: ApiKeyCapabilityId | OAuthClientCapabilityId | (string & {});
     /**
-     * Whom the call is for: the inbound request (its user), or
-     * `{ background: true, organizationId }` for work no person started
-     * (crons, Workflows, queues). An organization's own app may omit it for
-     * background work, which is then the app's; a shared app's Worker must
-     * pass one or the other ({@link AttributionError}).
+     * Whom the call is for. Left out, the request `everyApp()` is serving
+     * (its user, while the identity is good) or the organization
+     * `withOrganization()` named; outside both, `RequestContextError`.
+     * Explicitly: the inbound request, or `{ background: true,
+     * organizationId }` for work no person started (crons, Workflows,
+     * queues). A shared app's Worker must end up with one or the other
+     * ({@link AttributionError}).
      */
     for?: GatewayCallFor;
     /**
@@ -31,6 +33,14 @@ export interface IntegrationFetchOptions {
      * the default for background work). Sent as `x-everyapp-account`.
      */
     account?: ConnectionAccount;
+    /**
+     * `true`: answer null instead of throwing `ConfigurationError` when the
+     * provider is unavailable (no binding, and in local dev not its
+     * settings in `.dev.vars`), so a feature that can do without it checks
+     * for null. A wrong provider id, a binding that isn't one, and an
+     * attribution mistake still throw.
+     */
+    optional?: boolean;
 }
 /**
  * A `fetch` for one of the gateway's capabilities. Call the provider's real
@@ -54,7 +64,10 @@ export interface IntegrationFetchOptions {
  * provider show <id> --save` writes it), put on the call as the gateway's
  * spec says.
  */
-export declare function integrationFetch({ env, provider, for: target, account, }: IntegrationFetchOptions): typeof fetch;
+export declare function integrationFetch(options: IntegrationFetchOptions & {
+    optional: true;
+}): typeof fetch | null;
+export declare function integrationFetch(options: IntegrationFetchOptions): typeof fetch;
 /**
  * The `.dev.vars` name of a held token for `provider` in local dev
  * (`GOOGLE_WORKSPACE_ACCESS_TOKEN`, `GITHUB_ACCESS_TOKEN`): a token the
@@ -138,9 +151,17 @@ export type IntegrationStatusOf<P extends string> = P extends "email" ? EmailInt
  * set up") up front instead of failing mid-task. An OAuth client's status
  * carries its public `clientId` for the authorize URL.
  */
-export declare function integrationStatus<P extends CapabilityId | (string & {})>({ env, provider, }: {
+export declare function integrationStatus<P extends CapabilityId | (string & {})>({ env, provider, for: explicitTarget, }: {
     env: object;
     provider: P;
+    /**
+     * Whom the status is for: the request being served (its person), so an
+     * OAuth provider's `connection` is that person's; background work
+     * (`withOrganization()`) its organization, whose own connection is then
+     * reported. Explicitly the inbound request or `{ background: true,
+     * organizationId }`, as on every call.
+     */
+    for?: GatewayCallFor;
 }): Promise<IntegrationStatusOf<P>>;
 /** A refusal the AppGateway binding made itself, not the provider. */
 export interface GatewayRefusal {

package/dist/server/integrationFetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integrationFetch.d.ts","sourceRoot":"","sources":["../../src/server/integrationFetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAgCL,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAE1B,KAAK,uBAAuB,EAQ7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAO1B,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;OAOG;IACH,QAAQ,EAAE,kBAAkB,GAAG,uBAAuB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACvE;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,GAAG,EACH,QAAQ,EACR,GAAG,EAAE,MAAM,EACX,OAAO,GACR,EAAE,uBAAuB,GAAG,OAAO,KAAK,CAqJxC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3D;AAwgBD,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,SAAS,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,UAAU,EAAE,OAAO,CAAC;IACpB,8BAA8B;IAC9B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,iBAAiB,GACpD,IAAI,CAAC,qBAAqB,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,WAAW,4BAA6B,SAAQ,iBAAiB;IACrE,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,4DAA4D;IAC5D,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,MAAM,CAAC;IAClC,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,UAAU,CAAC,EAAE;QACX,OAAO,EAAE,iBAAiB,CAAC;QAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7B,KAAK,EAAE,OAAO,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GAAG,IAAI,CAAC;CACV;AAED,yFAAyF;AACzF,MAAM,MAAM,mBAAmB,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,OAAO,GACjE,sBAAsB,GACtB,CAAC,SAAS,uBAAuB,GAC/B,4BAA4B,GAC5B,iBAAiB,CAAC;AAExB;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,CAAC,SAAS,YAAY,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,EACtC,EACA,GAAG,EACH,QAAQ,GACT,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,CAAC,CAAC;CACb,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAoElC;AA0HD,sEAAsE;AACtE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAM,YAAW,cAAc;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,cAAc;CAMtD;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAWhC"}
+{"version":3,"file":"integrationFetch.d.ts","sourceRoot":"","sources":["../../src/server/integrationFetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAgCL,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAE1B,KAAK,uBAAuB,EAQ7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAO1B,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;OAOG;IACH,QAAQ,EAAE,kBAAkB,GAAG,uBAAuB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACvE;;;;;;;;OAQG;IACH,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,uBAAuB,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GACpD,OAAO,KAAK,GAAG,IAAI,CAAC;AACvB,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,uBAAuB,GAC/B,OAAO,KAAK,CAAC;AAmKhB;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3D;AAwgBD,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,SAAS,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,UAAU,EAAE,OAAO,CAAC;IACpB,8BAA8B;IAC9B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,iBAAiB,GACpD,IAAI,CAAC,qBAAqB,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,WAAW,4BAA6B,SAAQ,iBAAiB;IACrE,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,4DAA4D;IAC5D,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,MAAM,CAAC;IAClC,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,UAAU,CAAC,EAAE;QACX,OAAO,EAAE,iBAAiB,CAAC;QAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7B,KAAK,EAAE,OAAO,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GAAG,IAAI,CAAC;CACV;AAED,yFAAyF;AACzF,MAAM,MAAM,mBAAmB,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,OAAO,GACjE,sBAAsB,GACtB,CAAC,SAAS,uBAAuB,GAC/B,4BAA4B,GAC5B,iBAAiB,CAAC;AAExB;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,CAAC,SAAS,YAAY,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,EACtC,EACA,GAAG,EACH,QAAQ,EACR,GAAG,EAAE,cAAc,GACpB,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,CAAC,CAAC;IACZ;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAiFlC;AA0HD,sEAAsE;AACtE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAM,YAAW,cAAc;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,cAAc;CAMtD;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAWhC"}

package/dist/server/integrationFetch.js

@@ -1,31 +1,12 @@
 import { ACCOUNT_HEADER, CATALOG, ConfigurationError, GATEWAY_ERROR_HEADER, INTEGRATION_PROXY_PREFIX, OAUTH_TOKEN_BODY_LIMIT, allowedScopes, apiKeyHosts, authorizationFor, capabilitySettings, carriesToken, declaredScopeSets, describeTokenEndpoints, devProviderFile, grantedScopes, heldTokenCallAllowed, injectClientCredentials, integrationProxyPath, oauthClientCredentials, oauthClientOrigin, oauthReadMethods, oauthWriteMethods, providerSettingPrefix, requestedScopes, requestedTokenScopes, resolveDevProvider, rewriteTokenRequestScope, scopeExcess, tokenEndpointFor, tokenGrantType, EMAIL_SENDERS_ENV, chooseEmailProvider, parseEmailList, parseEmailSender, } from "../internal/index.js";
-import { applyAttribution, checkAttribution, } from "./attribution.js";
+import { applyAttribution, attributionFor, } from "./attribution.js";
 import { BINDING_ORIGIN, streamingRequest, } from "./gatewayFetch.js";
-/**
- * A `fetch` for one of the gateway's capabilities. Call the provider's real
- * URLs (`https://api.dataforseo.com/v3/…`); this sends them over the
- * AppGateway binding, which checks the app's manifest lists the capability,
- * injects the key the gateway holds and forwards the call. The app never
- * sees the key. A refusal the gateway makes itself comes back as a response
- * {@link gatewayRefusal} recognizes; anything else is the provider's answer.
- *
- * For an OAuth client (`linkedin`, `mastodon`, ...) it reaches the
- * provider's token endpoints only, and the gateway puts its client on the
- * request: send the code (or refresh token) without `client_id` or
- * `client_secret`. Build the authorize URL with {@link authorizeUrl} from
- * {@link integrationStatus}, and call the provider's API with the user's
- * token directly.
- *
- * In local dev only, with no binding, the developer's own key or client
- * from `.dev.vars` reaches the provider directly, under the gateway's names:
- * a catalog provider's from the catalog, a provider registered on the
- * gateway from its spec in `.everyapp/providers/<id>.json` (`everyapp
- * provider show <id> --save` writes it), put on the call as the gateway's
- * spec says.
- */
-export function integrationFetch({ env, provider, for: target, account, }) {
+export function integrationFetch({ env, provider, for: explicitTarget, account, optional = false, }) {
     const catalogEntry = fetchableCapability(provider);
-    checkAttribution(env, target, `integrationFetch("${provider}")`);
+    const what = `integrationFetch("${provider}")`;
+    // Checked now, so a call nobody's fails where the fetch is made; and
+    // again per call, where an identity may since have neared its expiry.
+    attributionFor(env, explicitTarget, what);
     const values = env;
     const binding = values["EVERY_APP_GATEWAY"];
     if (binding && typeof binding.fetch !== "function") {
@@ -46,6 +27,8 @@ export function integrationFetch({ env, provider, for: target, account, }) {
     // endpoint call without the client throws when it is made.
     const decidesLater = integration?.mode === "oauth_client" && integration.flow !== undefined;
     if (!binding && !local && !devToken && integration && !decidesLater) {
+        if (optional)
+            return null;
         const names = [
             ...capabilitySettings(integration),
             ...(integration.mode === "oauth_client" && integration.flow
@@ -55,6 +38,7 @@ export function integrationFetch({ env, provider, for: target, account, }) {
         throw new ConfigurationError(`${integration.label} is unavailable: deploy with the EVERY_APP_GATEWAY binding, or set ${names.join(", ")} in .dev.vars for local development.`);
     }
     return async (input, init) => {
+        const target = attributionFor(env, explicitTarget, what);
         const outbound = new Request(input, init);
         const upstream = new URL(outbound.url);
         const headers = new Headers(outbound.headers);
@@ -501,7 +485,8 @@ function stringValue(value) {
  * set up") up front instead of failing mid-task. An OAuth client's status
  * carries its public `clientId` for the authorize URL.
  */
-export async function integrationStatus({ env, provider, }) {
+export async function integrationStatus({ env, provider, for: explicitTarget, }) {
+    const target = attributionFor(env, explicitTarget, `integrationStatus("${String(provider)}")`);
     const values = env;
     const binding = values["EVERY_APP_GATEWAY"];
     // A provider registered on the gateway is the gateway's to answer for;
@@ -529,7 +514,18 @@ export async function integrationStatus({ env, provider, }) {
             ready: false,
         });
     if (binding && typeof binding.fetch === "function") {
-        const response = await binding.fetch(`${BINDING_ORIGIN}${INTEGRATION_PROXY_PREFIX}/${provider}`);
+        const statusUrl = `${BINDING_ORIGIN}${INTEGRATION_PROXY_PREFIX}/${provider}`;
+        let response;
+        if (target === undefined) {
+            response = await binding.fetch(statusUrl);
+        }
+        else {
+            // Whose status: the person's identity (their OAuth connection) or the
+            // organization's, as a call would carry it.
+            const headers = new Headers();
+            applyAttribution(headers, target);
+            response = await binding.fetch(statusUrl, { headers });
+        }
         if (!response.ok)
             return unavailable();
         return (await response.json());
@@ -685,6 +681,6 @@ export async function gatewayRefusal(response) {
         typeof body === "object" &&
         typeof body.message === "string"
         ? body.message
-        : `The Every App gateway refused the call (${code}).`;
+        : `The EveryApp gateway refused the call (${code}).`;
     return { status: response.status, code, message };
 }

package/dist/server/listMembers.d.ts

@@ -28,5 +28,5 @@ export interface ListMembersOptions {
  * for a request answers its signed-in user alone, and background work
  * answers no one.
  */
-export declare function listMembers({ env, for: target, }: ListMembersOptions): Promise<ListMembersResult>;
+export declare function listMembers({ env, for: explicitTarget, }: ListMembersOptions): Promise<ListMembersResult>;
 //# sourceMappingURL=listMembers.d.ts.map

package/dist/server/listMembers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"listMembers.d.ts","sourceRoot":"","sources":["../../src/server/listMembers.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,iBAAiB,EAEvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAK1B,MAAM,WAAW,kBAAkB;IACjC,8FAA8F;IAC9F,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,WAAW,CAAC,EAChC,GAAG,EACH,GAAG,EAAE,MAAM,GACZ,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAoBjD"}
+{"version":3,"file":"listMembers.d.ts","sourceRoot":"","sources":["../../src/server/listMembers.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAK1B,MAAM,WAAW,kBAAkB;IACjC,8FAA8F;IAC9F,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,WAAW,CAAC,EAChC,GAAG,EACH,GAAG,EAAE,cAAc,GACpB,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAoBjD"}