@every-app/sdk 0.3.0-rc.9 → 0.3.1

package/dist/server/eventsEndpoint.js

@@ -0,0 +1,145 @@
+/**
+ * The app side of the `app` event sink (docs/design/2026-11-birds-decisions/app-event-sink.md).
+ *
+ * `everyApp()` answers the reserved `POST /__everyapp/events` here, before
+ * any app code runs and whether or not the app passed `events`:
+ *
+ *  - the request needs the Gateway's system token for this app (purpose
+ *    `events.deliver`), whose `bh` claim is the SHA-256 of this exact body,
+ *    so a token opens one delivery and nothing else;
+ *  - the envelope must name the organization this Worker serves
+ *    (`EVERY_APP_ORG_ID`), when it is pinned;
+ *  - only then is `events.on` called, under `withOrganization()`, so every
+ *    Gateway call it makes is that organization's background work.
+ *
+ * The perimeter refuses the path from outside and strips inbound
+ * `x-everyapp-*` headers, so only the Gateway's event bus reaches it, over
+ * the service binding.
+ */
+import { APP_EVENTS_PATH, ConfigurationError, EVENT_HEADERS, IdentityError, SYSTEM_HEADER, bodyHash, resolveVerifyOptions, verifySystemJwt, } from "../internal/index.js";
+import { withOrganization } from "./context.js";
+/** The most body the endpoint reads: an envelope's data is at most 16 KiB. */
+const MAX_BODY_BYTES = 64 * 1024;
+function answer(status, body) {
+    return Response.json(body, {
+        status,
+        headers: { "cache-control": "no-store" },
+    });
+}
+function isEnvelope(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return false;
+    }
+    const v = value;
+    const org = v.organization;
+    return (typeof v.id === "string" &&
+        typeof v.type === "string" &&
+        typeof v.version === "number" &&
+        typeof v.time === "string" &&
+        !!org &&
+        typeof org === "object" &&
+        typeof org.id === "string" &&
+        !!v.data &&
+        typeof v.data === "object" &&
+        !Array.isArray(v.data));
+}
+function handlerFor(on, type) {
+    if (typeof on === "function")
+        return on;
+    return Object.prototype.hasOwnProperty.call(on, type) ? on[type] : undefined;
+}
+/**
+ * Answer a request to the reserved events path, or return null for any
+ * other path so the app's own handler runs.
+ */
+export async function handleEventsRequest(request, env, ctx, options) {
+    const { pathname } = new URL(request.url);
+    if (pathname !== APP_EVENTS_PATH)
+        return null;
+    if (request.method !== "POST") {
+        return answer(405, { error: "method_not_allowed" });
+    }
+    let verify;
+    try {
+        verify = resolveVerifyOptions(options.identity);
+    }
+    catch (error) {
+        if (error instanceof ConfigurationError) {
+            console.error(error);
+            return answer(500, { error: "misconfigured", message: error.message });
+        }
+        throw error;
+    }
+    let claims;
+    try {
+        claims = await verifySystemJwt(request.headers.get(SYSTEM_HEADER) ?? "", {
+            ...verify,
+            purpose: "events.deliver",
+        });
+    }
+    catch (error) {
+        if (error instanceof IdentityError) {
+            return answer(401, { error: "unauthenticated", message: error.message });
+        }
+        throw error;
+    }
+    const declared = Number(request.headers.get("content-length") ?? "0");
+    if (declared > MAX_BODY_BYTES) {
+        return answer(413, { error: "too_large" });
+    }
+    const body = await request.text();
+    if (body.length > MAX_BODY_BYTES) {
+        return answer(413, { error: "too_large" });
+    }
+    // The token was minted for this exact body: another body, even one the
+    // Gateway sent, is refused.
+    if (claims.bh !== (await bodyHash(body))) {
+        return answer(401, {
+            error: "unauthenticated",
+            message: "the token was minted for another delivery",
+        });
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        parsed = undefined;
+    }
+    if (!isEnvelope(parsed)) {
+        return answer(400, { error: "invalid_request" });
+    }
+    const pinned = options.identity.organizationId;
+    if (pinned && parsed.organization.id !== pinned) {
+        return answer(403, {
+            error: "forbidden",
+            message: `the event is for organization "${parsed.organization.id}", and this Worker serves "${pinned}"`,
+        });
+    }
+    if (!options.events) {
+        // The manifest subscribes, but the Worker passes no `events` to
+        // everyApp(): say so, and let the Gateway retry once it does.
+        return answer(404, {
+            error: "no_handler",
+            message: "everyApp() was given no events: { on }",
+        });
+    }
+    const handler = handlerFor(options.events.on, parsed.type);
+    if (!handler)
+        return answer(200, { ok: true, handled: false });
+    const event = {
+        ...parsed,
+        delivery: {
+            id: request.headers.get(EVENT_HEADERS.delivery) ?? "",
+            attempt: Number(request.headers.get(EVENT_HEADERS.attempt) ?? "0") || 0,
+        },
+    };
+    try {
+        await withOrganization(parsed.organization.id, () => handler(event, env, ctx));
+    }
+    catch (error) {
+        console.error(error);
+        return answer(500, { error: "handler_failed" });
+    }
+    return answer(200, { ok: true, handled: true });
+}

package/dist/server/everyApp.d.ts

@@ -13,21 +13,22 @@
  * `everyapp.config.ts` (the Cloudflare Vite plugin hides every file
  * `cloudflare.config.ts` imports from the Worker in dev).
  * It also answers the gateway's internal tools contract
- * (`/__everyapp/tools/*`) for the app's `defineTools()` catalog.
+ * (`/__everyapp/tools/*`) for the app's `defineTools()` catalog, and the
+ * event sink's deliveries (`/__everyapp/events`) for `events: { on }`.
  *
  * Around the handler and around each tool call it opens the request
- * context (context.ts): `currentUser()` reads the user anywhere below, and
- * every call back to the Gateway is attributed to the request without a
- * `for`. A deployed Worker is pinned to its organization
+ * context (context.ts): every call back to the Gateway is attributed to
+ * the request without a `for`. A deployed Worker is pinned to its organization
  * (`EVERY_APP_ORG_ID`), and an identity for any other is refused on both
  * paths. The response leaves without `Set-Cookie`: the perimeter strips
  * every `Cookie` before a request reaches the app, so a cookie the app's
  * framework sets could never come back, and one named like the Gateway's
  * session cookie would lock the person out of the app host.
  */
-import { ConfigurationError, IdentityError, isAdmin, type EveryAppUser, type IdentityResult, type OrgRole } from "../internal/index.js";
+import { ConfigurationError, isAdmin, type EveryAppUser, type IdentityResult, type OrgRole } from "../internal/index.js";
 import type { ToolSet } from "./tools.js";
-export { ConfigurationError, IdentityError, isAdmin };
+import { type AppEventsOptions } from "./eventsEndpoint.js";
+export { ConfigurationError, isAdmin };
 export type { EveryAppUser, IdentityResult, OrgRole };
 /**
  * The runtime's `ExecutionContext`, which `everyApp()` passes to the handler
@@ -36,11 +37,7 @@ export type { EveryAppUser, IdentityResult, OrgRole };
  * `fetch` themselves pass a stub cast to it.
  */
 export type ExecutionContextLike = ExecutionContext;
-export interface EveryAppManifestLike {
-    id: string;
-    [key: string]: unknown;
-}
-export interface EveryAppOptions {
+export interface EveryAppOptions<TEnv = Record<string, unknown>> {
     /** Optional expected issuer (gateway URL). Defaults to env.EVERYAPP_IDENTITY_ISSUER when set. */
     issuer?: string;
     /** Env var holding the public key set. Defaults to EVERYAPP_IDENTITY_PUBLIC_KEYS. */
@@ -57,6 +54,13 @@ export interface EveryAppOptions {
      * and serves them to MCP clients; see `defineTools`.
      */
     tools?: ToolSet;
+    /**
+     * The Gateway's events this app subscribes to (`events.subscribe` in its
+     * manifest), delivered to `on` over the service binding: one function, or
+     * one per type. The SDK verifies the Gateway's `events.deliver` token
+     * before `on` runs.
+     */
+    events?: AppEventsOptions<TEnv>;
     /** Override for tests. */
     now?: number;
 }
@@ -74,7 +78,6 @@ interface EveryAppExport<TEnv, TCtx extends ExecutionContextLike> {
  * (a framework that hands out headers alone needs no made-up Request).
  * Answers from the request context or the per-request cache first, then
  * verifies the identity headers from the audience and public keys in env.
- * Inside a handler `everyApp()` serves, `currentUser()` is the shorter way.
  */
 export declare function getEveryAppUser(request: Request | Headers, env: object): Promise<EveryAppUser | null>;
 /**
@@ -82,20 +85,7 @@ export declare function getEveryAppUser(request: Request | Headers, env: object)
  * everyApp() when the request is public or unauthenticated.
  */
 export declare function requireEveryAppUser(request: Request | Headers, env: object): Promise<EveryAppUser>;
-/**
- * The user of the request being served (`currentUser()`), or throw the
- * same 401 JSON Response as `requireEveryAppUser()` on a public route.
- * Outside a request (`withOrganization()` work, a handler not under
- * `everyApp()`) it throws `RequestContextError`, as `currentUser()` does.
- */
-export declare function requireCurrentUser(): EveryAppUser;
 export declare function hasScope(user: EveryAppUser, scope: string): boolean;
 /** Wrap a Worker fetch handler with Every App identity verification. */
-export declare function everyApp<TEnv = Record<string, unknown>, TCtx extends ExecutionContextLike = ExecutionContext>(handler: EveryAppHandler<TEnv, TCtx>, options?: EveryAppOptions): EveryAppExport<TEnv, TCtx>;
-/**
- * @deprecated Drop the manifest: the app id now comes from
- *   `env.EVERYAPP_APP_ID` and the audience from `env.EVERYAPP_AUDIENCE`.
- *   When passed, it must match the app id.
- */
-export declare function everyApp<TEnv = Record<string, unknown>, TCtx extends ExecutionContextLike = ExecutionContext>(handler: EveryAppHandler<TEnv, TCtx>, manifest: EveryAppManifestLike | undefined, options?: EveryAppOptions): EveryAppExport<TEnv, TCtx>;
+export declare function everyApp<TEnv = Record<string, unknown>, TCtx extends ExecutionContextLike = ExecutionContext>(handler: EveryAppHandler<TEnv, TCtx>, options?: EveryAppOptions<TEnv>): EveryAppExport<TEnv, TCtx>;
 //# sourceMappingURL=everyApp.d.ts.map

package/dist/server/everyApp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"everyApp.d.ts","sourceRoot":"","sources":["../../src/server/everyApp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAGL,kBAAkB,EAElB,aAAa,EAMb,OAAO,EACP,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,OAAO,EAEb,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;AACtD,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAEpD,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,iGAAiG;IACjG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,0BAA0B;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,CACzB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,SAAS,oBAAoB,GAAG,gBAAgB,IAClD,CACF,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,IAAI,EACT,GAAG,EAAE,IAAI,EACT,IAAI,EAAE,YAAY,GAAG,IAAI,KACtB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,UAAU,cAAc,CAAC,IAAI,EAAE,IAAI,SAAS,oBAAoB;IAC9D,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAClE;AAuKD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,GAAG,OAAO,EAC1B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAW9B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,GAAG,OAAO,EAC1B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,YAAY,CAAC,CAevB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,CAMjD;AA0BD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnE;AAUD,wEAAwE;AACxE,wBAAgB,QAAQ,CACtB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,SAAS,oBAAoB,GAAG,gBAAgB,EAEpD,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,EACpC,OAAO,CAAC,EAAE,eAAe,GACxB,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9B;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,SAAS,oBAAoB,GAAG,gBAAgB,EAEpD,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,EACpC,QAAQ,EAAE,oBAAoB,GAAG,SAAS,EAC1C,OAAO,CAAC,EAAE,eAAe,GACxB,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC"}
+{"version":3,"file":"everyApp.d.ts","sourceRoot":"","sources":["../../src/server/everyApp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAGL,kBAAkB,EAQlB,OAAO,EACP,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,OAAO,EAEb,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;AACvC,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAEpD,MAAM,WAAW,eAAe,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7D,iGAAiG;IACjG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChC,0BAA0B;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,CACzB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,SAAS,oBAAoB,GAAG,gBAAgB,IAClD,CACF,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,IAAI,EACT,GAAG,EAAE,IAAI,EACT,IAAI,EAAE,YAAY,GAAG,IAAI,KACtB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,UAAU,cAAc,CAAC,IAAI,EAAE,IAAI,SAAS,oBAAoB;IAC9D,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAClE;AAqJD;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,GAAG,OAAO,EAC1B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAW9B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,GAAG,OAAO,EAC1B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,YAAY,CAAC,CAevB;AA0BD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,wEAAwE;AACxE,wBAAgB,QAAQ,CACtB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,SAAS,oBAAoB,GAAG,gBAAgB,EAEpD,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,EACpC,OAAO,GAAE,eAAe,CAAC,IAAI,CAAM,GAClC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CA2D5B"}

package/dist/server/everyApp.js

@@ -13,12 +13,12 @@
  * `everyapp.config.ts` (the Cloudflare Vite plugin hides every file
  * `cloudflare.config.ts` imports from the Worker in dev).
  * It also answers the gateway's internal tools contract
- * (`/__everyapp/tools/*`) for the app's `defineTools()` catalog.
+ * (`/__everyapp/tools/*`) for the app's `defineTools()` catalog, and the
+ * event sink's deliveries (`/__everyapp/events`) for `events: { on }`.
  *
  * Around the handler and around each tool call it opens the request
- * context (context.ts): `currentUser()` reads the user anywhere below, and
- * every call back to the Gateway is attributed to the request without a
- * `for`. A deployed Worker is pinned to its organization
+ * context (context.ts): every call back to the Gateway is attributed to
+ * the request without a `for`. A deployed Worker is pinned to its organization
  * (`EVERY_APP_ORG_ID`), and an identity for any other is refused on both
  * paths. The response leaves without `Set-Cookie`: the perimeter strips
  * every `Cookie` before a request reaches the app, so a cookie the app's
@@ -28,7 +28,8 @@
 import { APP_ID_ENV, AUDIENCE_ENV, ConfigurationError, DEV_ENV, IdentityError, IDENTITY_HEADER, ISSUER_ENV, ORG_ID_ENV, PUBLIC_KEYS_ENV, getIdentityFromRequest, isAdmin, } from "../internal/index.js";
 import { currentUser, serveRequest } from "./context.js";
 import { handleToolsRequest } from "./toolsEndpoint.js";
-export { ConfigurationError, IdentityError, isAdmin };
+import { handleEventsRequest, } from "./eventsEndpoint.js";
+export { ConfigurationError, isAdmin };
 const requestIdentities = new WeakMap();
 function envValue(env, key) {
     if (!env || typeof env !== "object")
@@ -36,9 +37,8 @@ function envValue(env, key) {
     const value = env[key];
     return typeof value === "string" && value.length > 0 ? value : undefined;
 }
-function configFrom(manifest, options = {}) {
+function configFrom(options) {
     return {
-        manifestAppId: manifest?.id,
         issuer: options.issuer,
         keysEnvVar: options.keysEnvVar ?? PUBLIC_KEYS_ENV,
         publicKeys: options.publicKeys,
@@ -46,16 +46,9 @@ function configFrom(manifest, options = {}) {
         now: options.now,
     };
 }
-/**
- * The app id: EVERYAPP_APP_ID, or a manifest passed to everyApp() for
- * Workers without it; the two must agree when both are present.
- */
-function appIdFor(env, config) {
-    const fromEnv = envValue(env, APP_ID_ENV);
-    if (fromEnv && config.manifestAppId && fromEnv !== config.manifestAppId) {
-        throw new ConfigurationError(`${APP_ID_ENV} ("${fromEnv}") does not match the manifest id ("${config.manifestAppId}").`);
-    }
-    return fromEnv ?? config.manifestAppId;
+/** The app id, from EVERYAPP_APP_ID (which `everyAppWorker()` sets). */
+function appIdFor(env) {
+    return envValue(env, APP_ID_ENV);
 }
 function devIdentitiesAllowed(env, config) {
     const devEnv = envValue(env, DEV_ENV);
@@ -71,7 +64,7 @@ function devIdentitiesAllowed(env, config) {
  * app id stand in when EVERYAPP_AUDIENCE is unset.
  */
 function audienceFor(env, config) {
-    const appId = appIdFor(env, config);
+    const appId = appIdFor(env);
     const audience = envValue(env, AUDIENCE_ENV);
     if (audience)
         return audience;
@@ -153,7 +146,6 @@ const servedRequests = new WeakMap();
  * (a framework that hands out headers alone needs no made-up Request).
  * Answers from the request context or the per-request cache first, then
  * verifies the identity headers from the audience and public keys in env.
- * Inside a handler `everyApp()` serves, `currentUser()` is the shorter way.
  */
 export async function getEveryAppUser(request, env) {
     const cached = requestIdentities.get(request);
@@ -187,19 +179,6 @@ export async function requireEveryAppUser(request, env) {
         throw error;
     }
 }
-/**
- * The user of the request being served (`currentUser()`), or throw the
- * same 401 JSON Response as `requireEveryAppUser()` on a public route.
- * Outside a request (`withOrganization()` work, a handler not under
- * `everyApp()`) it throws `RequestContextError`, as `currentUser()` does.
- */
-export function requireCurrentUser() {
-    const user = currentUser();
-    if (!user) {
-        throw unauthorized("this request does not have an authenticated user");
-    }
-    return user;
-}
 /**
  * `response` without `Set-Cookie`: the perimeter strips every `Cookie`
  * before a request reaches the app, so no cookie the app sets ever comes
@@ -224,26 +203,16 @@ function withoutCookies(response) {
 export function hasScope(user, scope) {
     return user.scopes.includes("*") || user.scopes.includes(scope);
 }
-function isManifest(value) {
-    return (typeof value === "object" &&
-        value !== null &&
-        typeof value.id === "string");
-}
-export function everyApp(handler, manifestOrOptions, legacyOptions = {}) {
-    const manifest = isManifest(manifestOrOptions)
-        ? manifestOrOptions
-        : undefined;
-    const options = manifest || manifestOrOptions === undefined
-        ? legacyOptions
-        : manifestOrOptions;
-    const config = configFrom(manifest, options);
+/** Wrap a Worker fetch handler with Every App identity verification. */
+export function everyApp(handler, options = {}) {
+    const config = configFrom(options);
     return {
         async fetch(request, env, ctx) {
             let audience;
             let appId;
             try {
                 audience = audienceFor(env, config);
-                appId = appIdFor(env, config) ?? audience;
+                appId = appIdFor(env) ?? audience;
             }
             catch (err) {
                 if (err instanceof ConfigurationError) {
@@ -261,6 +230,13 @@ export function everyApp(handler, manifestOrOptions, legacyOptions = {}) {
             });
             if (toolsResponse)
                 return toolsResponse;
+            // So does the event sink's delivery path (`/__everyapp/events`).
+            const eventsResponse = await handleEventsRequest(request, env, ctx, {
+                events: options.events,
+                identity: identityOptions(env, config, audience),
+            });
+            if (eventsResponse)
+                return eventsResponse;
             let identity;
             try {
                 identity = await getIdentityFromRequest(request, identityOptions(env, config, audience));

package/dist/server/gatewayFetch.d.ts

@@ -31,7 +31,7 @@ export interface CreateGatewayFetchOptions {
     /**
      * Whom the call is for. Left out, the request `everyApp()` is serving
      * (its user, while the identity is good) or the organization
-     * `withOrganization()` named; outside both, `RequestContextError`.
+     * an event delivery runs under; outside both, `RequestContextError`.
      * Explicitly: the inbound request, or `{ background: true,
      * organizationId }` for work no person started (crons, Workflows,
      * queues). A shared app's Worker must end up with one or the other

package/dist/server/gatewayFetch.js

@@ -179,7 +179,7 @@ function directProviderPath(input, env) {
         // names a model sends it as it is).
         const values = env;
         const resolution = resolveAiDefault({
-            provider: null,
+            choice: null,
             isSet: (name) => typeof values[name] === "string" &&
                 values[name].trim().length > 0,
         });

package/dist/server/index.d.ts

@@ -3,27 +3,24 @@
  *
  * There is intentionally no client-side export.
  */
-export { ConfigurationError, IdentityError, everyApp, getEveryAppUser, hasScope, isAdmin, requireCurrentUser, requireEveryAppUser, type EveryAppOptions, type EveryAppManifestLike, type EveryAppHandler, type EveryAppUser, type IdentityResult, type OrgRole, } from "./everyApp.js";
-export { OrganizationMismatchError, RequestContextError, currentUser, withOrganization, } from "./context.js";
+export { ConfigurationError, everyApp, getEveryAppUser, hasScope, isAdmin, requireEveryAppUser, type EveryAppOptions, type EveryAppHandler, type EveryAppUser, type IdentityResult, type OrgRole, } from "./everyApp.js";
 export { AttributionError, type GatewayCallFor } from "./attribution.js";
 export { gatewayUrl } from "./gatewayUrl.js";
 export type { EveryAppEnv } from "./env.js";
 /** The header a Gateway refusal carries its code in; `gatewayRefusal()` reads the rest. */
 export { GATEWAY_ERROR_HEADER } from "../internal/protocol.js";
-export { authorizeUrl, type AuthorizeUrlOptions } from "./authorizeUrl.js";
 export { connectPath, connectUrl, type ConnectUrlOptions, } from "./connectUrl.js";
 export { createGatewayFetch, type CreateGatewayFetchOptions, } from "./gatewayFetch.js";
-export { ai, aiBaseUrl, aiStatus, providerBaseUrl, AI_DEFAULT_BASE_URL, type AiClient, type AiStatus, } from "./ai.js";
-export { AI_NOT_CONFIGURED_CODES, GatewayRefusalError, gatewayRefusal, isAiNotConfigured, refusalFromError, type GatewayRefusal, type SetupInfo, } from "./refusal.js";
+export { aiBaseUrl, providerBaseUrl } from "./ai.js";
+export { GatewayRefusalError, gatewayRefusal, refusalFromError, type GatewayRefusal, type SetupInfo, } from "./refusal.js";
 export { devAccessTokenName, integrationFetch, integrationStatus, type EmailIntegrationStatus, type IntegrationFetchOptions, type IntegrationStatus, type IntegrationStatusOf, type OAuthClientIntegrationStatus, } from "./integrationFetch.js";
 export { nodeServerHandler, type NodeServer, type NodeServerHandlerOptions, } from "./nodeServer.js";
 export { sendEmail, type SendEmailOptions } from "./sendEmail.js";
-export { gatewayAiBinding, type GatewayAiBindingOptions } from "./aiBinding.js";
-export { gatewayEmailBinding, type GatewayEmailBindingMessage, type GatewayEmailBindingOptions, } from "./emailBinding.js";
 export { listMembers, type ListMembersOptions } from "./listMembers.js";
 export { emit, type EmitOptions } from "./emit.js";
-export type { ApiKeyCapabilityId, CapabilityId, OAuthClientCapabilityId, ConnectionAccount, EmailAddressInput, EmailAttachmentInput, SendEmailMessage, SendEmailResult, ListMembersResult, OrganizationMember, OrganizationMemberRole, EmitEventResult, } from "../internal/index.js";
+export { WEBHOOK_MAX_BYTES_DEFAULT, verifyWebhook, type VerifyWebhookOptions, type WebhookProvider, type WebhookRefusalReason, type WebhookVerification, } from "./webhooks.js";
+export type { AppEvent, AppEventHandler, AppEventsOptions, } from "./eventsEndpoint.js";
+export type { ApiKeyCapabilityId, CapabilityId, OAuthPresetId, EmailAddressInput, EmailAttachmentInput, SendEmailMessage, SendEmailResult, ListMembersResult, OrganizationMember, OrganizationMemberRole, EmitEventResult, } from "../internal/index.js";
 export { ToolError, defineTools, toolResult, type DefineToolsOptions, type PlainToolSchema, type StandardSchemaWithJSON, type ToolContext, type ToolDefinition, type ToolResult, type ToolSchema, type ToolSet, } from "./tools.js";
 export type { ToolRisk } from "../internal/index.js";
-export { fromMcpTools, type FromMcpToolsOptions, type McpToolAnnotationsLike, type McpToolLike, type McpToolResultLike, type McpToolSchemaLike, } from "./fromMcpTools.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,QAAQ,EACR,eAAe,EACf,QAAQ,EACR,OAAO,EACP,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,OAAO,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,WAAW,EACX,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,2FAA2F;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EACL,WAAW,EACX,UAAU,EACV,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,EAAE,EACF,SAAS,EACT,QAAQ,EACR,eAAe,EACf,mBAAmB,EACnB,KAAK,QAAQ,EACb,KAAK,QAAQ,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,GAClC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,wBAAwB,GAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,YAAY,EACV,kBAAkB,EAClB,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,SAAS,EACT,WAAW,EACX,UAAU,EACV,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,GACb,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,kBAAkB,EAClB,QAAQ,EACR,eAAe,EACf,QAAQ,EACR,OAAO,EACP,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,OAAO,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,2FAA2F;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EACL,WAAW,EACX,UAAU,EACV,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,GAClC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,wBAAwB,GAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EACL,yBAAyB,EACzB,aAAa,EACb,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,QAAQ,EACR,eAAe,EACf,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,SAAS,EACT,WAAW,EACX,UAAU,EACV,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,GACb,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/server/index.js

@@ -3,23 +3,19 @@
  *
  * There is intentionally no client-side export.
  */
-export { ConfigurationError, IdentityError, everyApp, getEveryAppUser, hasScope, isAdmin, requireCurrentUser, requireEveryAppUser, } from "./everyApp.js";
-export { OrganizationMismatchError, RequestContextError, currentUser, withOrganization, } from "./context.js";
+export { ConfigurationError, everyApp, getEveryAppUser, hasScope, isAdmin, requireEveryAppUser, } from "./everyApp.js";
 export { AttributionError } from "./attribution.js";
 export { gatewayUrl } from "./gatewayUrl.js";
 /** The header a Gateway refusal carries its code in; `gatewayRefusal()` reads the rest. */
 export { GATEWAY_ERROR_HEADER } from "../internal/protocol.js";
-export { authorizeUrl } from "./authorizeUrl.js";
 export { connectPath, connectUrl, } from "./connectUrl.js";
 export { createGatewayFetch, } from "./gatewayFetch.js";
-export { ai, aiBaseUrl, aiStatus, providerBaseUrl, AI_DEFAULT_BASE_URL, } from "./ai.js";
-export { AI_NOT_CONFIGURED_CODES, GatewayRefusalError, gatewayRefusal, isAiNotConfigured, refusalFromError, } from "./refusal.js";
+export { aiBaseUrl, providerBaseUrl } from "./ai.js";
+export { GatewayRefusalError, gatewayRefusal, refusalFromError, } from "./refusal.js";
 export { devAccessTokenName, integrationFetch, integrationStatus, } from "./integrationFetch.js";
 export { nodeServerHandler, } from "./nodeServer.js";
 export { sendEmail } from "./sendEmail.js";
-export { gatewayAiBinding } from "./aiBinding.js";
-export { gatewayEmailBinding, } from "./emailBinding.js";
 export { listMembers } from "./listMembers.js";
 export { emit } from "./emit.js";
+export { WEBHOOK_MAX_BYTES_DEFAULT, verifyWebhook, } from "./webhooks.js";
 export { ToolError, defineTools, toolResult, } from "./tools.js";
-export { fromMcpTools, } from "./fromMcpTools.js";