// ---------------------------------------------------------------------------// Cloud MCP — the auth seam behind the shared host-mcp envelope, slotted into// the app composition root's `mcp: { auth }`:////   - auth -> cloudMcpAuth (WorkOS JWT + API-key + org-liveness + the two OAuth//                           discovery docs)//// `server.ts` intercepts `/mcp` transport for direct session Durable Object// dispatch, so the app envelope mounts only cloud's OAuth discovery docs (no// `sessions` or `reporter` seam). The MCP-path predicate lives in `./mount`// (`classifyMcpPath` / `prepareMcpOrgScope`), imported directly there. The MCP// session Durable Object class itself stays a platform-side export (server.ts)// and imports its siblings directly, NOT this barrel, to keep the DO bundle// react-start-free.// --------------------------------------------------------------------------- // `cloudMcpAuth` is the packaged seam (the WorkOS JWT/api-key auth provider with// its `McpAuth`/`McpOrganizationAuth` seams provided internally), shaped as the// `Layer<McpAuthProvider, never, IdentityProvider>` `ExecutorApp.make` expects.export { cloudMcpAuth } from "./auth-provider";