Appendix
Interface Matrix
Every way a request reaches a method
Every way a request reaches an app's methods, in one table.
| Interface | Trigger | Authentication | Entry point | Identity the method runs as | Sandbox | Environments | Declared in |
|---|---|---|---|---|---|---|---|
| Web | Browser on the app's origin | App session cookie, or guest visitor | serve for pages, proxy under /_/ | The app user or a visitor | Interactive, warm | Live, preview, dev | web interface |
| API | HTTPS request | Per-user app API key as bearer | /_/api/... on the app origin, or the platform API host with the app in the path | The key's owner | Interactive, warm | Live, preview, dev | api interface |
| MCP | An MCP client | App API key or session | /_/mcp on the app origin | The caller | Interactive, warm | Live, preview, dev | mcp interface |
| Agent | A chat turn | App session or guest | /_/agent/... | The user, with methods as tools | Interactive, warm | Live, preview, dev | agent interface |
| Voice | A phone call or a browser voice session | Per-session credential presented by the voice worker | The voice serve routes | The caller, with methods as tools | Interactive, warm | Live | voice interface |
| Cron | A schedule with a time zone | None; system invocation | The dispatcher on every HTTP pod | The system user with the system role | Disposable | Live | cron interface |
| Webhook | An external HTTP request | The webhook's configured secret | /_/webhook/... | The system user | Interactive, warm | Live | webhook interface |
| An inbound message to the app's address | None; system invocation | SMTP on the mail-inbound role | The system user | Disposable | Live | email interface | |
| Task | A background task started by a method or an agent | Hook token | The task routes | The originating identity | Interactive, warm | Live, preview, dev | Methods |
| Jewel shadow | A human invocation of a shadowed method | Hook token | Inside the execution path | The app's jewel user | Interactive, on a database mirror | Live | jewel on a method |
| Invoke as | A workspace member testing as a user | Workspace session with edit access | The manage routes | The chosen app user | Interactive, warm | Live, preview, dev | Dashboard |
Every entry converges on one execution point, which mints a hook token for the execution, resolves the environment, and dispatches to a sandbox or to a CLI tunnel. Every callback the method makes carries that token.