// ---------------------------------------------------------------------------// Cloud MCP — the auth seam behind the shared host-mcp envelope, slotted into// the app composition root's `mcp: { auth }`:////   - auth -> cloudMcpAuth (WorkOS JWT + API-key + org-liveness + the two OAuth//                           discovery docs)//// `server.ts` intercepts `/mcp` transport for the hibernatable Agent bridge, so// the app envelope mounts only cloud's OAuth discovery docs (no `sessions` or// `reporter` seam). The MCP-path predicate lives in `./mount` (`classifyMcpPath`// / `prepareMcpOrgScope`), imported directly there. The MCP session Durable// Object class itself stays a platform-side export (server.ts) and imports its// siblings directly, NOT this barrel, to keep the DO bundle react-start-free.// --------------------------------------------------------------------------- // `cloudMcpAuth` is the packaged seam (the WorkOS JWT/api-key auth provider with// its `McpAuth`/`McpOrganizationAuth` seams provided internally), shaped as the// `Layer<McpAuthProvider, never, IdentityProvider>` `ExecutorApp.make` expects.export { cloudMcpAuth } from "./auth-provider";