// ---------------------------------------------------------------------------// Cloud execution-stack seams.//// The shared `makeExecutionStack` (@executor-js/api/server) owns the body:// makeScopedExecutor -> createExecutionEngine -> EngineDecorator.decorate.// Used by the protected HTTP API (per-request) and the MCP session DO// (per-session) so changes to the stack flow to both. Cloud supplies the five// seam Layers it reads from; the only cloud-specific differences are the// Cloudflare dynamic-worker code substrate and the usage-metering decorator.//// - DbProvider -> cloudDbProviderLayer: rebuilds the postgres-js fuma// client per request off the request-scoped// `DbService.db` (Hyperdrive forbids sharing an I/O// handle across requests). The shared factory reads// `db` without caching, preserving per-request rebuild.// - PluginsProvider -> fresh per-request plugins with the Worker env's// WorkOS credentials.// - HostConfig -> `allowLocalNetwork` is config-driven (the// `ALLOW_LOCAL_NETWORK` var; production leaves it unset// -> `false`, the test workers set it `"true"`). It is// an SSRF/private-network guard, so it MUST NOT key off// a test flag. `webBaseUrl` is `VITE_PUBLIC_SITE_URL ??// executor.sh`.// - CodeExecutorProvider -> `makeDynamicWorkerExecutor({ loader: env.LOADER })`.// - EngineDecorator -> the billing decorator that meters each execution// to Autumn. BOTH cloud execution planes (the HTTP// `/api/*` executor plane AND the MCP session DO) use// the metered stack (`CloudMeteredExecutionStackLayer`,// ../engine/execution-stack-metered.ts), since the MCP// server is the primary execution surface. Billing// still lives in the cloud app, not this neutral// seams module; the decorator is composed on top.// --------------------------------------------------------------------------- import { env } from "cloudflare:workers";import { Layer } from "effect"; import { CodeExecutorProvider, DbProvider, HostConfig, PluginsProvider, collectTables,} from "@executor-js/api/server";import { googleCatalogOAuthScopesForPreset } from "@executor-js/plugin-openapi/providers/google";import { makeDynamicWorkerExecutor } from "@executor-js/runtime-dynamic-worker";import type { AnyPlugin, FirstPartyOAuthClientConfig } from "@executor-js/sdk"; import executorConfig from "../../executor.config";import { DbService } from "../db/db";import { cloudDbProviderLayer } from "../db/fuma"; export { makeExecutionStack } from "@executor-js/api/server"; // The executor table set is fixed (plugin-independent), so the per-request// DbProvider rebuilds the fuma client over the same schema.export const CloudDbProvider = cloudDbProviderLayer(collectTables()); const cloudPluginFactory = executorConfig.plugins as (deps: { readonly workosCredentials: { readonly apiKey: string; readonly clientId: string; readonly apiUrl?: string; }; readonly activeToolkitSlug?: string;}) => readonly AnyPlugin[]; // Fresh plugin instances per request, carrying the Worker env's WorkOS Vault// credentials. Matches the old `createScopedExecutor`'s `orgPlugins()`.export const CloudPluginsProvider: Layer.Layer<PluginsProvider> = Layer.succeed(PluginsProvider)({ plugins: (context) => cloudPluginFactory({ workosCredentials: { apiKey: env.WORKOS_API_KEY, clientId: env.WORKOS_CLIENT_ID, apiUrl: env.WORKOS_API_URL, }, activeToolkitSlug: context?.mcpResource?.kind === "toolkit" ? context.mcpResource.slug : undefined, }),}); /** * The path prefix the cloud mounts its typed API under. SINGLE SOURCE OF TRUTH: * `app.ts` passes this as `ExecutorApp.make({ config: { mountPrefix } })`, and * `make` derives the OAuth callback (`${webBaseUrl}${CLOUD_MOUNT_PREFIX}/oauth/callback`) * from that same `mountPrefix`, so the redirect URI the host sends to providers * always matches the route that actually serves the callback — no second knob. */export const CLOUD_MOUNT_PREFIX = "/api" as const; // Initial Google launch boundary. Gmail uses gmail.modify for read, send, and// trash operations while immediate permanent deletion remains absent until the// broader mail.google.com scope is approved. Account-wide Drive remains absent.// The same scope source builds the catalog auth templates, preventing drift.const GOOGLE_FIRST_PARTY_ALLOWED_SCOPES: readonly string[] = [ ...new Set([ ...googleCatalogOAuthScopesForPreset("google-calendar"), ...googleCatalogOAuthScopesForPreset("google-gmail"), ...googleCatalogOAuthScopesForPreset("google-sheets"), ]),]; // Executor-owned provider apps, enabled per provider by setting BOTH env vars// (id + secret). Each provider-side registration must list// `${VITE_PUBLIC_SITE_URL}/api/oauth/callback` as its callback; the org slug// travels inside OAuth `state`, so the single static callback serves every org.//// The endpoint URLs default to the real provider; the `_AUTHORIZE_URL` /// `_TOKEN_URL` overrides exist so tests and dev instances can point the app at// an emulated provider (`@executor-js/emulate`) and run the complete flow.// Production leaves them unset.const cloudFirstPartyOAuthClients = (): readonly FirstPartyOAuthClientConfig[] => [ ...(env.FIRST_PARTY_GITHUB_CLIENT_ID && env.FIRST_PARTY_GITHUB_CLIENT_SECRET ? [ { name: "github", authorizationUrl: env.FIRST_PARTY_GITHUB_AUTHORIZE_URL ?? "https://github.com/login/oauth/authorize", tokenUrl: env.FIRST_PARTY_GITHUB_TOKEN_URL ?? "https://github.com/login/oauth/access_token", clientId: env.FIRST_PARTY_GITHUB_CLIENT_ID, clientSecret: env.FIRST_PARTY_GITHUB_CLIENT_SECRET, }, ] : []), ...(env.FIRST_PARTY_GOOGLE_CLIENT_ID && env.FIRST_PARTY_GOOGLE_CLIENT_SECRET ? [ { name: "google", authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth", tokenUrl: "https://oauth2.googleapis.com/token", clientId: env.FIRST_PARTY_GOOGLE_CLIENT_ID, clientSecret: env.FIRST_PARTY_GOOGLE_CLIENT_SECRET, allowedScopes: GOOGLE_FIRST_PARTY_ALLOWED_SCOPES, }, ] : []),]; export const CloudHostConfig: Layer.Layer<HostConfig> = Layer.sync(HostConfig, () => ({ // SSRF / private-network egress guard. Config-driven, NOT a test flag: // production leaves `ALLOW_LOCAL_NETWORK` unset so the guard stays ON (`false`); // the e2e dev-server env opts in with `"true"` so in-scenario fixture // servers on localhost are reachable. See `hosted-http-client.ts`. allowLocalNetwork: env.ALLOW_LOCAL_NETWORK === "true", webBaseUrl: env.VITE_PUBLIC_SITE_URL ?? "https://executor.sh", oauthCallbackPath: `${CLOUD_MOUNT_PREFIX}/oauth/callback`, // WorkOS Vault is cloud's credential storage implementation detail, not a // user-selectable provider surface. exposeCredentialProviders: false, firstPartyOAuthClients: cloudFirstPartyOAuthClients(),})); export const CloudCodeExecutorProvider: Layer.Layer<CodeExecutorProvider> = Layer.sync( CodeExecutorProvider, () => makeDynamicWorkerExecutor({ loader: env.LOADER }),); /** * The four billing-free execution-stack seams (db / plugins / host-config / * code-executor): everything `makeExecutionStack` reads EXCEPT the * `EngineDecorator`. Both cloud planes compose this with the billing decorator * via `CloudMeteredExecutionStackLayer` (../engine/execution-stack-metered.ts); * exported so that overlay builds over the SAME four seams. There is no neutral * no-op-decorator variant anymore: every cloud execution meters. */export const CloudExecutionSeamsLayer: Layer.Layer< DbProvider | PluginsProvider | HostConfig | CodeExecutorProvider, never, DbService> = Layer.mergeAll( CloudDbProvider, CloudPluginsProvider, CloudHostConfig, CloudCodeExecutorProvider,);
// ---------------------------------------------------------------------------
// Cloud execution-stack seams.
//
// The shared `makeExecutionStack` (@executor-js/api/server) owns the body:
// makeScopedExecutor -> createExecutionEngine -> EngineDecorator.decorate.
// Used by the protected HTTP API (per-request) and the MCP session DO
// (per-session) so changes to the stack flow to both. Cloud supplies the five
// seam Layers it reads from; the only cloud-specific differences are the
// Cloudflare dynamic-worker code substrate and the usage-metering decorator.
//
// - DbProvider -> cloudDbProviderLayer: rebuilds the postgres-js fuma
// client per request off the request-scoped
// `DbService.db` (Hyperdrive forbids sharing an I/O
// handle across requests). The shared factory reads
// `db` without caching, preserving per-request rebuild.
// - PluginsProvider -> fresh per-request plugins with the Worker env's
// WorkOS credentials.
// - HostConfig -> `allowLocalNetwork` is config-driven (the
// `ALLOW_LOCAL_NETWORK` var; production leaves it unset
// -> `false`, the test workers set it `"true"`). It is
// an SSRF/private-network guard, so it MUST NOT key off
// a test flag. `webBaseUrl` is `VITE_PUBLIC_SITE_URL ??
// executor.sh`.
// - CodeExecutorProvider -> `makeDynamicWorkerExecutor({ loader: env.LOADER })`.
// - EngineDecorator -> the billing decorator that meters each execution
// to Autumn. BOTH cloud execution planes (the HTTP
// `/api/*` executor plane AND the MCP session DO) use
// the metered stack (`CloudMeteredExecutionStackLayer`,
// ../engine/execution-stack-metered.ts), since the MCP
// server is the primary execution surface. Billing
// still lives in the cloud app, not this neutral
// seams module; the decorator is composed on top.
// ---------------------------------------------------------------------------
import { env } from "cloudflare:workers";
import { Layer } from "effect";
import {
CodeExecutorProvider,
DbProvider,
HostConfig,
PluginsProvider,
collectTables,
} from "@executor-js/api/server";
import { googleCatalogOAuthScopesForPreset } from "@executor-js/plugin-openapi/providers/google";
import { makeDynamicWorkerExecutor } from "@executor-js/runtime-dynamic-worker";
import type { AnyPlugin, FirstPartyOAuthClientConfig } from "@executor-js/sdk";
import executorConfig from "../../executor.config";
import { DbService } from "../db/db";
import { cloudDbProviderLayer } from "../db/fuma";
export { makeExecutionStack } from "@executor-js/api/server";
// The executor table set is fixed (plugin-independent), so the per-request
// DbProvider rebuilds the fuma client over the same schema.
export const CloudDbProvider = cloudDbProviderLayer(collectTables());
const cloudPluginFactory = executorConfig.plugins as (deps: {
readonly workosCredentials: {
readonly apiKey: string;
readonly clientId: string;
readonly apiUrl?: string;
};
readonly activeToolkitSlug?: string;
}) => readonly AnyPlugin[];
// Fresh plugin instances per request, carrying the Worker env's WorkOS Vault
// credentials. Matches the old `createScopedExecutor`'s `orgPlugins()`.
export const CloudPluginsProvider: Layer.Layer<PluginsProvider> = Layer.succeed(PluginsProvider)({
plugins: (context) =>
cloudPluginFactory({
workosCredentials: {
apiKey: env.WORKOS_API_KEY,
clientId: env.WORKOS_CLIENT_ID,
apiUrl: env.WORKOS_API_URL,
},
activeToolkitSlug:
context?.mcpResource?.kind === "toolkit" ? context.mcpResource.slug : undefined,
}),
});
/**
* The path prefix the cloud mounts its typed API under. SINGLE SOURCE OF TRUTH:
* `app.ts` passes this as `ExecutorApp.make({ config: { mountPrefix } })`, and
* `make` derives the OAuth callback (`${webBaseUrl}${CLOUD_MOUNT_PREFIX}/oauth/callback`)
* from that same `mountPrefix`, so the redirect URI the host sends to providers
* always matches the route that actually serves the callback — no second knob.
*/
export const CLOUD_MOUNT_PREFIX = "/api" as const;
// Initial Google launch boundary. Gmail uses gmail.modify for read, send, and
// trash operations while immediate permanent deletion remains absent until the
// broader mail.google.com scope is approved. Account-wide Drive remains absent.
// The same scope source builds the catalog auth templates, preventing drift.
const GOOGLE_FIRST_PARTY_ALLOWED_SCOPES: readonly string[] = [
...new Set([
...googleCatalogOAuthScopesForPreset("google-calendar"),
...googleCatalogOAuthScopesForPreset("google-gmail"),
...googleCatalogOAuthScopesForPreset("google-sheets"),
]),
];
// Executor-owned provider apps, enabled per provider by setting BOTH env vars
// (id + secret). Each provider-side registration must list
// `${VITE_PUBLIC_SITE_URL}/api/oauth/callback` as its callback; the org slug
// travels inside OAuth `state`, so the single static callback serves every org.
//
// The endpoint URLs default to the real provider; the `_AUTHORIZE_URL` /
// `_TOKEN_URL` overrides exist so tests and dev instances can point the app at
// an emulated provider (`@executor-js/emulate`) and run the complete flow.
// Production leaves them unset.
const cloudFirstPartyOAuthClients = (): readonly FirstPartyOAuthClientConfig[] => [
...(env.FIRST_PARTY_GITHUB_CLIENT_ID && env.FIRST_PARTY_GITHUB_CLIENT_SECRET
? [
{
name: "github",
authorizationUrl:
env.FIRST_PARTY_GITHUB_AUTHORIZE_URL ?? "https://github.com/login/oauth/authorize",
tokenUrl:
env.FIRST_PARTY_GITHUB_TOKEN_URL ?? "https://github.com/login/oauth/access_token",
clientId: env.FIRST_PARTY_GITHUB_CLIENT_ID,
clientSecret: env.FIRST_PARTY_GITHUB_CLIENT_SECRET,
},
]
: []),
...(env.FIRST_PARTY_GOOGLE_CLIENT_ID && env.FIRST_PARTY_GOOGLE_CLIENT_SECRET
? [
{
name: "google",
authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
tokenUrl: "https://oauth2.googleapis.com/token",
clientId: env.FIRST_PARTY_GOOGLE_CLIENT_ID,
clientSecret: env.FIRST_PARTY_GOOGLE_CLIENT_SECRET,
allowedScopes: GOOGLE_FIRST_PARTY_ALLOWED_SCOPES,
},
]
: []),
];
export const CloudHostConfig: Layer.Layer<HostConfig> = Layer.sync(HostConfig, () => ({
// SSRF / private-network egress guard. Config-driven, NOT a test flag:
// production leaves `ALLOW_LOCAL_NETWORK` unset so the guard stays ON (`false`);
// the e2e dev-server env opts in with `"true"` so in-scenario fixture
// servers on localhost are reachable. See `hosted-http-client.ts`.
allowLocalNetwork: env.ALLOW_LOCAL_NETWORK === "true",
webBaseUrl: env.VITE_PUBLIC_SITE_URL ?? "https://executor.sh",
oauthCallbackPath: `${CLOUD_MOUNT_PREFIX}/oauth/callback`,
// WorkOS Vault is cloud's credential storage implementation detail, not a
// user-selectable provider surface.
exposeCredentialProviders: false,
firstPartyOAuthClients: cloudFirstPartyOAuthClients(),
}));
export const CloudCodeExecutorProvider: Layer.Layer<CodeExecutorProvider> = Layer.sync(
CodeExecutorProvider,
() => makeDynamicWorkerExecutor({ loader: env.LOADER }),
);
/**
* The four billing-free execution-stack seams (db / plugins / host-config /
* code-executor): everything `makeExecutionStack` reads EXCEPT the
* `EngineDecorator`. Both cloud planes compose this with the billing decorator
* via `CloudMeteredExecutionStackLayer` (../engine/execution-stack-metered.ts);
* exported so that overlay builds over the SAME four seams. There is no neutral
* no-op-decorator variant anymore: every cloud execution meters.
*/
export const CloudExecutionSeamsLayer: Layer.Layer<
DbProvider | PluginsProvider | HostConfig | CodeExecutorProvider,
never,
DbService
> = Layer.mergeAll(
CloudDbProvider,
CloudPluginsProvider,
CloudHostConfig,
CloudCodeExecutorProvider,
);