@every-app/sdk 0.3.0-rc.8 → 0.3.0

package/dist/internal/catalog/comms.d.ts

@@ -186,6 +186,43 @@ export declare const COMMS: {
         };
         readonly tags: readonly ["support", "chat", "messaging"];
     };
+    readonly granola: {
+        readonly mode: "api_key";
+        readonly label: "Granola";
+        readonly description: "Meeting notes: list, search and read notes with their AI summaries, transcripts, folders and spaces.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "GRANOLA_API_KEY";
+        };
+        readonly docs: "https://docs.granola.ai/help-center/sharing/integrations/granola-api";
+        readonly api: "https://docs.granola.ai/introduction";
+        readonly hosts: readonly ["public-api.granola.ai"];
+        readonly data: "account";
+        readonly access: readonly ["read"];
+        readonly readMethods: readonly ["GET", "POST"];
+        readonly accountWidePaths: readonly [readonly ["audit"], readonly ["webhook-endpoints"], readonly ["legal-holds"]];
+        readonly hint: "An API key (grn_...) from the Granola desktop app's Settings > Connectors > API keys, on a Business or Enterprise plan; the Gateway sends it as a bearer token. It reads only the notes its scopes allow.";
+        readonly secrets: readonly [{
+            readonly name: "GRANOLA_API_KEY";
+            readonly hint: "A personal or workspace API key (grn_...), with only the note scopes the apps need.";
+        }];
+        readonly rate: {
+            readonly perSecond: 5;
+            readonly note: "Bursts of 25 requests in 5 seconds; per user or per workspace, by the key's scope.";
+        };
+        readonly smoke: {
+            readonly method: "GET";
+            readonly path: "/v1/notes?page_size=1";
+            readonly expect: readonly [200];
+            readonly free: true;
+        };
+        readonly example: "summarize what we decided in this week's customer calls";
+        readonly verified: {
+            readonly on: "2026-10-30";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["meetings", "notes", "transcripts"];
+    };
     readonly linear: {
         readonly mode: "api_key";
         readonly label: "Linear";

package/dist/internal/catalog/comms.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"comms.d.ts","sourceRoot":"","sources":["../../../src/internal/catalog/comms.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqemC,CAAC"}
+{"version":3,"file":"comms.d.ts","sourceRoot":"","sources":["../../../src/internal/catalog/comms.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAihBmC,CAAC"}

package/dist/internal/catalog/comms.js

@@ -259,6 +259,49 @@ export const COMMS = {
         },
         tags: ["support", "chat", "messaging"],
     },
+    // Added 2026-10-30 from docs.granola.ai and its OpenAPI spec. Granola's
+    // hosted MCP server (mcp.granola.ai/mcp) is OAuth only, which the Gateway
+    // can't sign in to yet; this is its API-key REST API.
+    granola: {
+        mode: "api_key",
+        label: "Granola",
+        description: "Meeting notes: list, search and read notes with their AI summaries, transcripts, folders and spaces.",
+        auth: { kind: "bearer", secret: "GRANOLA_API_KEY" },
+        docs: "https://docs.granola.ai/help-center/sharing/integrations/granola-api",
+        api: "https://docs.granola.ai/introduction",
+        hosts: ["public-api.granola.ai"],
+        data: "account",
+        access: ["read"],
+        // Searching notes is a POST that reads; with the paths below refused,
+        // it is the only POST an app can reach.
+        readMethods: ["GET", "POST"],
+        // Workspace administration: the audit log, webhook endpoints (which
+        // would send every note to a URL of the app's choosing) and legal holds.
+        accountWidePaths: [["audit"], ["webhook-endpoints"], ["legal-holds"]],
+        hint: "An API key (grn_...) from the Granola desktop app's Settings > Connectors > API keys, on a Business or Enterprise plan; the Gateway sends it as a bearer token. It reads only the notes its scopes allow.",
+        secrets: [
+            {
+                name: "GRANOLA_API_KEY",
+                hint: "A personal or workspace API key (grn_...), with only the note scopes the apps need.",
+            },
+        ],
+        rate: {
+            perSecond: 5,
+            note: "Bursts of 25 requests in 5 seconds; per user or per workspace, by the key's scope.",
+        },
+        smoke: {
+            method: "GET",
+            path: "/v1/notes?page_size=1",
+            expect: [200],
+            free: true,
+        },
+        example: "summarize what we decided in this week's customer calls",
+        verified: {
+            on: "2026-10-30",
+            how: "docs",
+        },
+        tags: ["meetings", "notes", "transcripts"],
+    },
     linear: {
         mode: "api_key",
         label: "Linear",

package/dist/internal/catalog/index.d.ts

@@ -1206,6 +1206,41 @@ export declare const CATALOG_ENTRIES: {
         };
         readonly tags: readonly ["weather", "forecast"];
     };
+    readonly daytona: {
+        readonly mode: "api_key";
+        readonly label: "Daytona";
+        readonly description: "Sandboxes for running code: create, start, stop, archive and delete sandboxes, and manage their snapshots and volumes.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "DAYTONA_API_KEY";
+        };
+        readonly docs: "https://www.daytona.io/docs/en/api-keys/";
+        readonly api: "https://www.daytona.io/docs/en/tools/api/";
+        readonly hosts: readonly ["app.daytona.io"];
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PUT", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["organizations"], readonly ["organization"], readonly ["billing"], readonly ["api-keys"], readonly ["users"], readonly ["audit"], readonly ["webhooks"], readonly ["secret"], readonly ["docker-registry"], readonly ["object-storage"], readonly ["regions"], readonly ["runners"], readonly ["for-runner"], readonly ["jobs"], readonly ["warm-pools"], readonly ["preview"], readonly ["ssh-access", "validate"]];
+        readonly hint: "An API key from the Daytona dashboard's Keys page, with only the permissions the apps need; the Gateway sends it as a bearer token to app.daytona.io. Any key of an organization reaches every running sandbox in it, so give the Gateway a Daytona organization of its own.";
+        readonly secrets: readonly [{
+            readonly name: "DAYTONA_API_KEY";
+            readonly hint: "An API key from the Daytona dashboard's Keys page: write:sandboxes and delete:sandboxes (and the snapshot or volume ones) only if an app needs them, and never manage:api_keys, manage:secrets, manage:billing or the region and runner permissions.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly path: "/api/sandbox";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "Lists the organization's sandboxes; any key may read them.";
+        };
+        readonly example: "start a sandbox from my snapshot and stop it when the run is done";
+        readonly verified: {
+            readonly on: "2026-11-01";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["sandbox", "compute", "hosting"];
+    };
     readonly postmark: {
         readonly mode: "api_key";
         readonly label: "Postmark";
@@ -1393,6 +1428,43 @@ export declare const CATALOG_ENTRIES: {
         };
         readonly tags: readonly ["support", "chat", "messaging"];
     };
+    readonly granola: {
+        readonly mode: "api_key";
+        readonly label: "Granola";
+        readonly description: "Meeting notes: list, search and read notes with their AI summaries, transcripts, folders and spaces.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "GRANOLA_API_KEY";
+        };
+        readonly docs: "https://docs.granola.ai/help-center/sharing/integrations/granola-api";
+        readonly api: "https://docs.granola.ai/introduction";
+        readonly hosts: readonly ["public-api.granola.ai"];
+        readonly data: "account";
+        readonly access: readonly ["read"];
+        readonly readMethods: readonly ["GET", "POST"];
+        readonly accountWidePaths: readonly [readonly ["audit"], readonly ["webhook-endpoints"], readonly ["legal-holds"]];
+        readonly hint: "An API key (grn_...) from the Granola desktop app's Settings > Connectors > API keys, on a Business or Enterprise plan; the Gateway sends it as a bearer token. It reads only the notes its scopes allow.";
+        readonly secrets: readonly [{
+            readonly name: "GRANOLA_API_KEY";
+            readonly hint: "A personal or workspace API key (grn_...), with only the note scopes the apps need.";
+        }];
+        readonly rate: {
+            readonly perSecond: 5;
+            readonly note: "Bursts of 25 requests in 5 seconds; per user or per workspace, by the key's scope.";
+        };
+        readonly smoke: {
+            readonly method: "GET";
+            readonly path: "/v1/notes?page_size=1";
+            readonly expect: readonly [200];
+            readonly free: true;
+        };
+        readonly example: "summarize what we decided in this week's customer calls";
+        readonly verified: {
+            readonly on: "2026-10-30";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["meetings", "notes", "transcripts"];
+    };
     readonly linear: {
         readonly mode: "api_key";
         readonly label: "Linear";

package/dist/internal/catalog/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal/catalog/index.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMlB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal/catalog/index.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMlB,CAAC"}

package/dist/internal/catalog/infra.d.ts

@@ -419,5 +419,40 @@ export declare const INFRA: {
         };
         readonly tags: readonly ["weather", "forecast"];
     };
+    readonly daytona: {
+        readonly mode: "api_key";
+        readonly label: "Daytona";
+        readonly description: "Sandboxes for running code: create, start, stop, archive and delete sandboxes, and manage their snapshots and volumes.";
+        readonly auth: {
+            readonly kind: "bearer";
+            readonly secret: "DAYTONA_API_KEY";
+        };
+        readonly docs: "https://www.daytona.io/docs/en/api-keys/";
+        readonly api: "https://www.daytona.io/docs/en/tools/api/";
+        readonly hosts: readonly ["app.daytona.io"];
+        readonly data: "account";
+        readonly access: readonly ["read", "write"];
+        readonly readMethods: readonly ["GET", "HEAD"];
+        readonly writeMethods: readonly ["POST", "PUT", "PATCH", "DELETE"];
+        readonly accountWidePaths: readonly [readonly ["organizations"], readonly ["organization"], readonly ["billing"], readonly ["api-keys"], readonly ["users"], readonly ["audit"], readonly ["webhooks"], readonly ["secret"], readonly ["docker-registry"], readonly ["object-storage"], readonly ["regions"], readonly ["runners"], readonly ["for-runner"], readonly ["jobs"], readonly ["warm-pools"], readonly ["preview"], readonly ["ssh-access", "validate"]];
+        readonly hint: "An API key from the Daytona dashboard's Keys page, with only the permissions the apps need; the Gateway sends it as a bearer token to app.daytona.io. Any key of an organization reaches every running sandbox in it, so give the Gateway a Daytona organization of its own.";
+        readonly secrets: readonly [{
+            readonly name: "DAYTONA_API_KEY";
+            readonly hint: "An API key from the Daytona dashboard's Keys page: write:sandboxes and delete:sandboxes (and the snapshot or volume ones) only if an app needs them, and never manage:api_keys, manage:secrets, manage:billing or the region and runner permissions.";
+        }];
+        readonly smoke: {
+            readonly method: "GET";
+            readonly path: "/api/sandbox";
+            readonly expect: readonly [200];
+            readonly free: true;
+            readonly note: "Lists the organization's sandboxes; any key may read them.";
+        };
+        readonly example: "start a sandbox from my snapshot and stop it when the run is done";
+        readonly verified: {
+            readonly on: "2026-11-01";
+            readonly how: "docs";
+        };
+        readonly tags: readonly ["sandbox", "compute", "hosting"];
+    };
 };
 //# sourceMappingURL=infra.d.ts.map

package/dist/internal/catalog/infra.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infra.d.ts","sourceRoot":"","sources":["../../../src/internal/catalog/infra.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyiBmC,CAAC"}
+{"version":3,"file":"infra.d.ts","sourceRoot":"","sources":["../../../src/internal/catalog/infra.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4mBmC,CAAC"}

package/dist/internal/catalog/infra.js

@@ -540,4 +540,69 @@ export const INFRA = {
         },
         tags: ["weather", "forecast"],
     },
+    // Added 2026-11-01 from Daytona's OpenAPI spec (daytona.io/docs/openapi.json)
+    // and its API-key docs, for Birds' sandboxes (docs/design/
+    // 2026-11-birds-forcing-function.md, section 1.12). The control plane only:
+    // preview URLs (<port>-<id>.proxy.daytona.works, per-sandbox tokens) and
+    // the toolbox stay outside the proxy.
+    daytona: {
+        mode: "api_key",
+        label: "Daytona",
+        description: "Sandboxes for running code: create, start, stop, archive and delete sandboxes, and manage their snapshots and volumes.",
+        auth: { kind: "bearer", secret: "DAYTONA_API_KEY" },
+        docs: "https://www.daytona.io/docs/en/api-keys/",
+        api: "https://www.daytona.io/docs/en/tools/api/",
+        hosts: ["app.daytona.io"],
+        data: "account",
+        access: ["read", "write"],
+        readMethods: ["GET", "HEAD"],
+        writeMethods: ["POST", "PUT", "PATCH", "DELETE"],
+        // One key is the whole Daytona organization's. Refused: the
+        // organization itself (members, roles, invitations, SSO, usage and
+        // spend, its settings), billing, API keys, the signed-in user, the audit
+        // log, webhooks (which would send every sandbox event to a URL of the
+        // app's choosing), and what hands out the organization's credentials or
+        // runs its infrastructure: the organization's secrets, registry and
+        // object-storage push access, regions (which regenerate proxy and SSH
+        // keys), runners, jobs, warm pools, and the preview proxy's own checks.
+        accountWidePaths: [
+            ["organizations"],
+            ["organization"],
+            ["billing"],
+            ["api-keys"],
+            ["users"],
+            ["audit"],
+            ["webhooks"],
+            ["secret"],
+            ["docker-registry"],
+            ["object-storage"],
+            ["regions"],
+            ["runners"],
+            ["for-runner"],
+            ["jobs"],
+            ["warm-pools"],
+            ["preview"],
+            ["ssh-access", "validate"],
+        ],
+        hint: "An API key from the Daytona dashboard's Keys page, with only the permissions the apps need; the Gateway sends it as a bearer token to app.daytona.io. Any key of an organization reaches every running sandbox in it, so give the Gateway a Daytona organization of its own.",
+        secrets: [
+            {
+                name: "DAYTONA_API_KEY",
+                hint: "An API key from the Daytona dashboard's Keys page: write:sandboxes and delete:sandboxes (and the snapshot or volume ones) only if an app needs them, and never manage:api_keys, manage:secrets, manage:billing or the region and runner permissions.",
+            },
+        ],
+        smoke: {
+            method: "GET",
+            path: "/api/sandbox",
+            expect: [200],
+            free: true,
+            note: "Lists the organization's sandboxes; any key may read them.",
+        },
+        example: "start a sandbox from my snapshot and stop it when the run is done",
+        verified: {
+            on: "2026-11-01",
+            how: "docs",
+        },
+        tags: ["sandbox", "compute", "hosting"],
+    },
 };

package/dist/internal/devProviders.d.ts

@@ -1,21 +1,3 @@
-/**
- * A provider registered on a gateway, in local development
- * (docs/design/2026-10-provider-registry.md, section 4). There is no
- * gateway to ask in `everyapp dev`, so the spec comes from the app's
- * directory: `everyapp provider add` (run in an app directory) and
- * `everyapp provider show <id> --save` write it to
- * `.everyapp/providers/<id>.json`, `everyAppWorker()` reads every such
- * file when it builds the dev Worker and hands them over as one text
- * binding, {@link DEV_PROVIDERS_ENV}, and `integrationFetch()`'s local
- * fallback resolves an id outside the catalog from it, with the
- * developer's own key from `.dev.vars` under the spec's setting names.
- *
- * The binding is JSON: `[{ "file": ".everyapp/providers/stripe.json",
- * "spec": <the file's JSON, or its text when it isn't JSON> }]`. Each spec
- * is parsed here, with the same parser `provider add` uses; one that
- * doesn't parse is ignored until an app asks for its id, which then gets
- * a ConfigurationError naming the file.
- */
 import { type RegistrableCapability } from "./providerSpec.js";
 /** The dev Worker's binding holding the specs (a copy is in ../cloudflare/worker.ts, kept in step by a test). */
 export declare const DEV_PROVIDERS_ENV = "EVERYAPP_DEV_PROVIDERS";
@@ -34,7 +16,7 @@ export declare function devProviderFile(id: string): string;
 export type DevProviderLookup = {
     found: true;
     capability: RegistrableCapability;
-    file: string;
+    file?: string;
 } | {
     found: false;
     problem: string;

package/dist/internal/devProviders.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devProviders.d.ts","sourceRoot":"","sources":["../../src/internal/devProviders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAC;AAE3B,iHAAiH;AACjH,eAAO,MAAM,iBAAiB,2BAA2B,CAAC;AAE1D,iEAAiE;AACjE,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AAEvD,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,IAAI,EAAE,OAAO,CAAC;CACf;AAED,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,qBAAqB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAuBtC;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACzC,EAAE,EAAE,MAAM,GACT,iBAAiB,CA+BnB"}
+{"version":3,"file":"devProviders.d.ts","sourceRoot":"","sources":["../../src/internal/devProviders.ts"],"names":[],"mappings":"AAqBA,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAC;AAE3B,iHAAiH;AACjH,eAAO,MAAM,iBAAiB,2BAA2B,CAAC;AAE1D,iEAAiE;AACjE,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AAEvD,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,IAAI,EAAE,OAAO,CAAC;CACf;AAED,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,qBAAqB,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAuBtC;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACzC,EAAE,EAAE,MAAM,GACT,iBAAiB,CAiCnB"}

package/dist/internal/devProviders.js

@@ -8,7 +8,9 @@
  * file when it builds the dev Worker and hands them over as one text
  * binding, {@link DEV_PROVIDERS_ENV}, and `integrationFetch()`'s local
  * fallback resolves an id outside the catalog from it, with the
- * developer's own key from `.dev.vars` under the spec's setting names.
+ * developer's own key from `.dev.vars` under the spec's setting names. An
+ * OAuth preset's id needs no file: its preset is the spec (a deploy writes
+ * the same row).
  *
  * The binding is JSON: `[{ "file": ".everyapp/providers/stripe.json",
  * "spec": <the file's JSON, or its text when it isn't JSON> }]`. Each spec
@@ -16,6 +18,7 @@
  * doesn't parse is ignored until an app asks for its id, which then gets
  * a ConfigurationError naming the file.
  */
+import { oauthPreset } from "./oauthPresets.js";
 import { describeSpecProblems, parseProviderSpec, } from "./providerSpec.js";
 /** The dev Worker's binding holding the specs (a copy is in ../cloudflare/worker.ts, kept in step by a test). */
 export const DEV_PROVIDERS_ENV = "EVERYAPP_DEV_PROVIDERS";
@@ -71,6 +74,9 @@ export function resolveDevProvider(values, id) {
         }
         return { found: true, capability: parsed.capability, file: entry.file };
     }
+    const preset = problem ? null : oauthPreset(id);
+    if (preset)
+        return { found: true, capability: preset };
     return {
         found: false,
         problem: problem

package/dist/internal/events.d.ts

@@ -114,11 +114,62 @@ export declare const EVENT_PRIVATE_NAME_SUFFIXES: readonly string[];
  */
 export declare function isPrivateEventTargetName(host: string): boolean;
 /** The sinks a subscription delivers to. */
-export declare const EVENT_SINKS: readonly ["webhook", "email"];
+export declare const EVENT_SINKS: readonly ["webhook", "email", "app"];
 export type EventSink = (typeof EVENT_SINKS)[number];
 /** Whom the email sink mails: the organization's owners, or owners and admins. */
 export declare const EVENT_EMAIL_RECIPIENTS: readonly ["owners", "admins"];
 export type EventEmailRecipients = (typeof EVENT_EMAIL_RECIPIENTS)[number];
+/**
+ * The `app` sink (docs/design/2026-11-birds-decisions/app-event-sink.md):
+ * an app declares `events: { subscribe, why }` in its manifest, the deploy
+ * makes the subscription for the app's own organization, and the Gateway
+ * delivers over the app's service binding to {@link APP_EVENTS_PATH} with a
+ * system token of purpose `events.deliver`.
+ *
+ * Which events may reach an app is an **allowlist** of families, not a
+ * deny-list: a family added to the catalogue later reaches no app until it
+ * is added here on purpose. `token.*`, `subscription.*`, `provider.*`,
+ * `signin_provider.*`, `cap.*`, `ai.*`, `access.*` and `organization.*` are
+ * not on it, and `member.password_reset` is left out of `member.*`.
+ */
+export declare const APP_EVENTS_PATH = "/__everyapp/events";
+export declare const APP_SINK_EVENT_FAMILIES: readonly EventGroup[];
+/** Types of an allowed family that still never reach an app. */
+export declare const APP_SINK_EXCLUDED_TYPES: readonly string[];
+/** The most patterns one app's `events.subscribe` may list. */
+export declare const APP_SINK_PATTERNS_MAX = 25;
+/**
+ * Whether an event of this type may be delivered to an app at all: its
+ * family is on the allowlist and the type isn't excluded. Checked when the
+ * bus queues a delivery and again before each attempt, whatever the
+ * subscription's stored patterns say.
+ */
+export declare function appSinkTypeAllowed(type: string): boolean;
+/**
+ * What is wrong with a pattern an app's manifest subscribes to, or null: a
+ * well-formed pattern ({@link eventPatternProblem}) inside an allowed
+ * family. `*` and any pattern outside the families are refused at deploy.
+ */
+export declare function appSinkPatternProblem(pattern: string): string | null;
+/**
+ * What the Gateway POSTs to {@link APP_EVENTS_PATH}: the same envelope a
+ * webhook receives.
+ */
+export interface AppEventEnvelope {
+    id: string;
+    type: string;
+    version: number;
+    summary: string;
+    time: string;
+    gateway: string;
+    organization: {
+        id: string;
+        slug: string;
+        name: string;
+    };
+    actor: unknown;
+    data: Record<string, unknown>;
+}
 /**
  * A subscription pattern: `*` (everything but ping), an exact type, or a
  * prefix with `.*` (`member.*`, `app.*`, `app.crm.*`). `app.*` matches the

package/dist/internal/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/internal/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,cAAc,GACd,KAAK,GACL,KAAK,GACL,OAAO,GACP,MAAM,GACN,YAAY,GACZ,OAAO,GACP,QAAQ,GACR,iBAAiB,GACjB,SAAS,GACT,UAAU,GACV,cAAc,GACd,IAAI,GACJ,MAAM,CAAC;AAEX,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AASD;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,aAAa,EAmI/C,CAAC;AAIF,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAErE;AAED,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,QAA0C,CAAC;AAC9E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,+CAA+C;AAC/C,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMvD;AAED,uDAAuD;AACvD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAWhE;AAED,4DAA4D;AAC5D,eAAO,MAAM,wBAAwB,QAAW,CAAC;AACjD,4EAA4E;AAC5E,eAAO,MAAM,oBAAoB,QAAY,CAAC;AAC9C,gCAAgC;AAChC,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,sDAAsD;AACtD,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,sCAAsC;AACtC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,yCAAyC;AACzC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C;;;GAGG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,8DAA8D;AAC9D,eAAO,MAAM,cAAc,MAAM,CAAC;AAClC,4BAA4B;AAC5B,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,6BAA6B;AAC7B,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAElD,CAAC;AACF,eAAO,MAAM,2BAA2B,QAAmC,CAAC;AAC5E,+CAA+C;AAC/C,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAChD,wEAAwE;AACxE,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAClD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,mEAAmE;AACnE,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,qFAAqF;AACrF,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,kDAAkD;AAClD,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AAEX,wEAAwE;AACxE,eAAO,MAAM,oCAAoC,iCACjB,CAAC;AAEjC;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAWxD,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAK9D;AAED,4CAA4C;AAC5C,eAAO,MAAM,WAAW,+BAAgC,CAAC;AACzD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AACrD,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,+BAAgC,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAU1E;AAED,iEAAiE;AACjE,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAET;AAID;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAalE;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,QACkE,CAAC;AAEtG,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B,CAAC;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,GAAG,gBAAgB,CAAC,CAAC;AAqBvC;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,OAAO,EACb,QAAQ,SAA2B,GAClC,cAAc,CAmDhB;AAED,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,uBAAuB;AACvB,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAY5C"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/internal/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,cAAc,GACd,KAAK,GACL,KAAK,GACL,OAAO,GACP,MAAM,GACN,YAAY,GACZ,OAAO,GACP,QAAQ,GACR,iBAAiB,GACjB,SAAS,GACT,UAAU,GACV,cAAc,GACd,IAAI,GACJ,MAAM,CAAC;AAEX,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AASD;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,aAAa,EA6I/C,CAAC;AAIF,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAErE;AAED,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,QAA0C,CAAC;AAC9E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,+CAA+C;AAC/C,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMvD;AAED,uDAAuD;AACvD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAWhE;AAED,4DAA4D;AAC5D,eAAO,MAAM,wBAAwB,QAAW,CAAC;AACjD,4EAA4E;AAC5E,eAAO,MAAM,oBAAoB,QAAY,CAAC;AAC9C,gCAAgC;AAChC,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,sDAAsD;AACtD,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,sCAAsC;AACtC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,yCAAyC;AACzC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C;;;GAGG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,8DAA8D;AAC9D,eAAO,MAAM,cAAc,MAAM,CAAC;AAClC,4BAA4B;AAC5B,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,6BAA6B;AAC7B,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAElD,CAAC;AACF,eAAO,MAAM,2BAA2B,QAAmC,CAAC;AAC5E,+CAA+C;AAC/C,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAChD,wEAAwE;AACxE,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAClD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,mEAAmE;AACnE,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,qFAAqF;AACrF,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,kDAAkD;AAClD,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AAEX,wEAAwE;AACxE,eAAO,MAAM,oCAAoC,iCACjB,CAAC;AAEjC;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAWxD,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAK9D;AAED,4CAA4C;AAC5C,eAAO,MAAM,WAAW,sCAAuC,CAAC;AAChE,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AACrD,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,+BAAgC,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,uBAAuB,CAAC;AACpD,eAAO,MAAM,uBAAuB,EAAE,SAAS,UAAU,EAOxD,CAAC;AACF,gEAAgE;AAChE,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAEpD,CAAC;AACF,+DAA+D;AAC/D,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAQxC;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKxD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAapE;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAU1E;AAED,iEAAiE;AACjE,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAET;AAID;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAalE;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,QACkE,CAAC;AAEtG,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B,CAAC;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,GAAG,gBAAgB,CAAC,CAAC;AAqBvC;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,OAAO,EACb,QAAQ,SAA2B,GAClC,cAAc,CAmDhB;AAED,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,uBAAuB;AACvB,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAY5C"}

package/dist/internal/events.js

@@ -26,6 +26,7 @@ export const EVENT_TYPES = [
     entry("member", "member.password_reset", "A member reset their password"),
     entry("member", "member.invitation_cancelled", "A pending invitation was cancelled"),
     entry("organization", "organization.renamed", "The workspace was renamed"),
+    entry("organization", "organization.linked_dev_changed", "Linked dev (everyapp dev against this Gateway) was turned on or off"),
     entry("app", "app.installed", "An app was installed on the Gateway"),
     entry("app", "app.updated", "An app was redeployed"),
     entry("app", "app.live", "An app went live on the Gateway"),
@@ -51,6 +52,7 @@ export const EVENT_TYPES = [
     entry("tool", "tool.error", "An AI client's tool call failed"),
     entry("connection", "connection.created", "An AI app was connected"),
     entry("connection", "connection.revoked", "An AI app connection was revoked"),
+    entry("connection", "connection.used", "Linked dev used the Gateway's services, or an app used a member's OAuth connection (first call of the day)"),
     entry("token", "token.created", "A personal access token was created"),
     entry("token", "token.revoked", "A personal access token was revoked"),
     entry("access", "access.changed", "Cloudflare Access was turned on or off"),
@@ -65,7 +67,7 @@ export const EVENT_TYPES = [
     entry("provider", "provider.added", "A provider was registered"),
     entry("provider", "provider.removed", "A provider was removed"),
     entry("provider", "provider.updated", "A provider's spec or OAuth client was replaced"),
-    entry("provider", "provider.connected", "Someone connected an account at an OAuth provider"),
+    entry("provider", "provider.connected", "Someone connected an account at an OAuth provider in an app"),
     entry("provider", "provider.disconnected", "An OAuth provider account was disconnected"),
     entry("provider", "provider.connection_expired", "An OAuth provider refused to refresh a connection; it needs reconnecting"),
     entry("subscription", "subscription.created", "An event subscription was added"),
@@ -201,9 +203,71 @@ export function isPrivateEventTargetName(host) {
     return EVENT_PRIVATE_NAME_SUFFIXES.some((suffix) => host === suffix || host.endsWith(`.${suffix}`));
 }
 /** The sinks a subscription delivers to. */
-export const EVENT_SINKS = ["webhook", "email"];
+export const EVENT_SINKS = ["webhook", "email", "app"];
 /** Whom the email sink mails: the organization's owners, or owners and admins. */
 export const EVENT_EMAIL_RECIPIENTS = ["owners", "admins"];
+/**
+ * The `app` sink (docs/design/2026-11-birds-decisions/app-event-sink.md):
+ * an app declares `events: { subscribe, why }` in its manifest, the deploy
+ * makes the subscription for the app's own organization, and the Gateway
+ * delivers over the app's service binding to {@link APP_EVENTS_PATH} with a
+ * system token of purpose `events.deliver`.
+ *
+ * Which events may reach an app is an **allowlist** of families, not a
+ * deny-list: a family added to the catalogue later reaches no app until it
+ * is added here on purpose. `token.*`, `subscription.*`, `provider.*`,
+ * `signin_provider.*`, `cap.*`, `ai.*`, `access.*` and `organization.*` are
+ * not on it, and `member.password_reset` is left out of `member.*`.
+ */
+export const APP_EVENTS_PATH = "/__everyapp/events";
+export const APP_SINK_EVENT_FAMILIES = [
+    "member",
+    "group",
+    "app",
+    "mcp_app",
+    "connection",
+    "tool",
+];
+/** Types of an allowed family that still never reach an app. */
+export const APP_SINK_EXCLUDED_TYPES = [
+    "member.password_reset",
+];
+/** The most patterns one app's `events.subscribe` may list. */
+export const APP_SINK_PATTERNS_MAX = 25;
+/** The family a type or pattern belongs to: its first segment. */
+function familyOf(typeOrPattern) {
+    const dot = typeOrPattern.indexOf(".");
+    return dot === -1 ? typeOrPattern : typeOrPattern.slice(0, dot);
+}
+/**
+ * Whether an event of this type may be delivered to an app at all: its
+ * family is on the allowlist and the type isn't excluded. Checked when the
+ * bus queues a delivery and again before each attempt, whatever the
+ * subscription's stored patterns say.
+ */
+export function appSinkTypeAllowed(type) {
+    if (APP_SINK_EXCLUDED_TYPES.includes(type))
+        return false;
+    return APP_SINK_EVENT_FAMILIES.includes(familyOf(type));
+}
+/**
+ * What is wrong with a pattern an app's manifest subscribes to, or null: a
+ * well-formed pattern ({@link eventPatternProblem}) inside an allowed
+ * family. `*` and any pattern outside the families are refused at deploy.
+ */
+export function appSinkPatternProblem(pattern) {
+    const problem = eventPatternProblem(pattern);
+    if (problem)
+        return problem;
+    if (APP_SINK_EXCLUDED_TYPES.includes(pattern)) {
+        return `"${pattern}" never reaches an app`;
+    }
+    if (pattern === "*" ||
+        !APP_SINK_EVENT_FAMILIES.includes(familyOf(pattern))) {
+        return `"${pattern}" can't reach an app: an app subscribes to ${APP_SINK_EVENT_FAMILIES.map((family) => `${family}.*`).join(", ")} (member.password_reset excepted)`;
+    }
+    return null;
+}
 /**
  * A subscription pattern: `*` (everything but ping), an exact type, or a
  * prefix with `.*` (`member.*`, `app.*`, `app.crm.*`). `app.*` matches the

package/dist/internal/gatewaySettings.d.ts

@@ -20,7 +20,7 @@ import { type CapabilitySecret } from "./capabilities.js";
 export declare const INSTALL_OWNED_GATEWAY_SETTINGS: readonly ["GATEWAY_URL", "APP_BASE_DOMAIN", "BETTER_AUTH_SECRET", "JWT_PRIVATE_KEY", "JWT_PUBLIC_KEY", "GATEWAY_DEPLOYMENT_MODE", "CLOUDFLARE_ACCOUNT_ID", "THIRD_PARTY_DEPLOYS"];
 export declare function isInstallOwnedGatewaySetting(name: string): boolean;
 /** The Gateway's own optional settings `everyapp secret set` changes: nothing a provider reads. */
-export declare const GATEWAY_OWN_SETTINGS: readonly ["AI_PROXY_EXTRA_ROUTES", "EMAIL_REST_API_TOKEN", "RESEND_API_KEY", "EMAIL_PROVIDER", "EMAIL_FROM", "EMAIL_FROM_NAME", "MCP_OAUTH_ENABLED", "MCP_DCR_ENABLED", "MCP_ALLOWED_ORIGINS", "MCP_AUDIT_RETENTION_DAYS", "CLOUDFLARE_ACCESS_OIDC_ISSUER", "CLOUDFLARE_ACCESS_OIDC_CLIENT_ID", "CLOUDFLARE_ACCESS_OIDC_CLIENT_SECRET", "CLOUDFLARE_ACCESS_OIDC_LABEL", "CLOUDFLARE_ACCESS_TEAM_DOMAIN", "CLOUDFLARE_ACCESS_AUD", "CLOUDFLARE_ACCESS_APPS_AUD", "CLOUDFLARE_ACCESS_AUTO_JOIN_DOMAINS", "CLOUDFLARE_ACCESS_OUTER_RING_AUTO_JOIN", "EMAIL_PASSWORD_SIGN_IN", "HOSTED_OPEN_SIGNUP", "CF_DEPLOY_TOKEN", "BROWSER_APP_INSTALLS", "DISPATCH_NAMESPACE", "THIRD_PARTY_DOMAIN", "EVENTS_ALLOW_PRIVATE_TARGETS"];
+export declare const GATEWAY_OWN_SETTINGS: readonly ["EMAIL_REST_API_TOKEN", "RESEND_API_KEY", "EMAIL_PROVIDER", "EMAIL_FROM", "EMAIL_FROM_NAME", "MCP_OAUTH_ENABLED", "MCP_DCR_ENABLED", "MCP_ALLOWED_ORIGINS", "MCP_AUDIT_RETENTION_DAYS", "CLOUDFLARE_ACCESS_OIDC_ISSUER", "CLOUDFLARE_ACCESS_OIDC_CLIENT_ID", "CLOUDFLARE_ACCESS_OIDC_CLIENT_SECRET", "CLOUDFLARE_ACCESS_OIDC_LABEL", "CLOUDFLARE_ACCESS_TEAM_DOMAIN", "CLOUDFLARE_ACCESS_AUD", "CLOUDFLARE_ACCESS_APPS_AUD", "EMAIL_PASSWORD_SIGN_IN", "HOSTED_OPEN_SIGNUP", "CF_DEPLOY_TOKEN", "BROWSER_APP_INSTALLS", "DISPATCH_NAMESPACE", "THIRD_PARTY_DOMAIN", "EVENTS_ALLOW_PRIVATE_TARGETS"];
 export type SettableGatewaySetting = Exclude<CapabilitySecret, (typeof INSTALL_OWNED_GATEWAY_SETTINGS)[number]> | (typeof GATEWAY_OWN_SETTINGS)[number];
 /**
  * The Gateway's optional settings `everyapp secret set` changes: every
@@ -29,20 +29,10 @@ export type SettableGatewaySetting = Exclude<CapabilitySecret, (typeof INSTALL_O
  */
 export declare const SETTABLE_GATEWAY_SETTINGS: readonly SettableGatewaySetting[];
 /**
- * The credential names of remote MCP apps (`everyapp mcp add <url>`,
- * ./remoteMcp.ts): `<ID>_MCP_TOKEN` by default, any name ending in
- * `_MCP_TOKEN` by choice. A family rather than a list, so the names a
- * registry row declares at run time route to the Gateway like the fixed
- * names (`everyapp secret set` reads no registry to decide), an app's own
- * secret can never take one (the manifest validator refuses the family),
- * and a remote server can never be given a fixed provider key.
- */
-export declare const REMOTE_MCP_SECRET_PATTERN: RegExp;
-/** Whether `name` is a remote MCP app's credential name (`TREG_MCP_TOKEN`). */
-export declare function isRemoteMcpSecretName(name: string): boolean;
-/**
- * Whether `everyapp secret set <name>` changes the Gateway: one of the
- * fixed settings, or a remote MCP app's credential name.
+ * Whether `everyapp secret set <name>` changes the Gateway because the
+ * catalog or the Gateway itself reads it. A registered provider row's
+ * settings (a remote MCP app's `<APPID>_MCP_TOKEN` among them) are the
+ * registry's (`providerRegistry().settingNames()`), checked at run time.
  */
 export declare function isSettableGatewaySetting(name: string): boolean;
 /**
@@ -52,7 +42,7 @@ export declare function isSettableGatewaySetting(name: string): boolean;
  * are typed and check their shape; anything else is a credential and
  * stays hidden.
  */
-export declare const PLAIN_GATEWAY_SETTINGS: readonly ["EMAIL_FROM", "EMAIL_FROM_NAME", "EMAIL_PROVIDER", "EMAIL_PASSWORD_SIGN_IN", "AI_PROXY_EXTRA_ROUTES", "MCP_OAUTH_ENABLED", "MCP_DCR_ENABLED", "MCP_ALLOWED_ORIGINS", "MCP_AUDIT_RETENTION_DAYS", "CLOUDFLARE_ACCESS_OIDC_ISSUER", "CLOUDFLARE_ACCESS_OIDC_CLIENT_ID", "CLOUDFLARE_ACCESS_OIDC_LABEL", "CLOUDFLARE_ACCESS_TEAM_DOMAIN", "CLOUDFLARE_ACCESS_AUD", "CLOUDFLARE_ACCESS_APPS_AUD", "CLOUDFLARE_ACCESS_AUTO_JOIN_DOMAINS", "CLOUDFLARE_ACCESS_OUTER_RING_AUTO_JOIN", "HOSTED_OPEN_SIGNUP", "BROWSER_APP_INSTALLS", "DISPATCH_NAMESPACE", "THIRD_PARTY_DOMAIN", "EVENTS_ALLOW_PRIVATE_TARGETS"];
+export declare const PLAIN_GATEWAY_SETTINGS: readonly ["EMAIL_FROM", "EMAIL_FROM_NAME", "EMAIL_PROVIDER", "EMAIL_PASSWORD_SIGN_IN", "MCP_OAUTH_ENABLED", "MCP_DCR_ENABLED", "MCP_ALLOWED_ORIGINS", "MCP_AUDIT_RETENTION_DAYS", "CLOUDFLARE_ACCESS_OIDC_ISSUER", "CLOUDFLARE_ACCESS_OIDC_CLIENT_ID", "CLOUDFLARE_ACCESS_OIDC_LABEL", "CLOUDFLARE_ACCESS_TEAM_DOMAIN", "CLOUDFLARE_ACCESS_AUD", "CLOUDFLARE_ACCESS_APPS_AUD", "HOSTED_OPEN_SIGNUP", "BROWSER_APP_INSTALLS", "DISPATCH_NAMESPACE", "THIRD_PARTY_DOMAIN", "EVENTS_ALLOW_PRIVATE_TARGETS"];
 /** Whether a settable Gateway setting's value is a plain value, not a credential. */
 export declare function isPlainGatewaySetting(name: string): boolean;
 /**

package/dist/internal/gatewaySettings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gatewaySettings.d.ts","sourceRoot":"","sources":["../../src/internal/gatewaySettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAM3B;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,mLASjC,CAAC;AAMX,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElE;AAmBD,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,yrBAkCvB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAC9B,OAAO,CAAC,gBAAgB,EAAE,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,GAC1E,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1C;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,sBAAsB,EAItE,CAAC;AAIF;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,QAAgC,CAAC;AAEvE,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,olBAuBmB,CAAC;AASvD,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,6EAIa,CAAC;AAIvD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,iGAAiG;AACjG,eAAO,MAAM,yBAAyB,yDAI5B,CAAC;AAEX,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAmBD,iDAAiD;AACjD,eAAO,MAAM,8BAA8B,sFAC0C,CAAC;AAEtF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAM7D;AAED,4EAA4E;AAC5E,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAQ5E"}
+{"version":3,"file":"gatewaySettings.d.ts","sourceRoot":"","sources":["../../src/internal/gatewaySettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAM3B;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,mLASjC,CAAC;AAMX,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElE;AAmBD,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,+kBA+BvB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAC9B,OAAO,CAAC,gBAAgB,EAAE,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,GAC1E,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1C;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,sBAAsB,EAItE,CAAC;AAIF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,0eAoBmB,CAAC;AASvD,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,6EAIa,CAAC;AAIvD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,iGAAiG;AACjG,eAAO,MAAM,yBAAyB,yDAI5B,CAAC;AAEX,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAmBD,iDAAiD;AACjD,eAAO,MAAM,8BAA8B,sFAC0C,CAAC;AAEtF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAM7D;AAED,4EAA4E;AAC5E,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAQ5E"}