- WORKOS_API_URL / AUTUMN_API_URL env seams point the REAL SDKs (incl. the vault plugin via credentials.apiUrl) at the vendored emulators. Production composition is unconditional again — the EXECUTOR_E2E_STUB layer swap and every *.test-layer.ts are deleted. - e2e cloud target: identities minted through the REAL login flow (login → emulator-hosted AuthKit, headless via login_hint → callback → genuine sealed-session cookie), orgs through the real create-organization route. - MCP_AUTHKIT_DOMAIN points at the emulator's OAuth authorization server — cloud MCP OAuth e2e now RUNS (was capability-skipped): 19/19 scenarios, zero skips across both targets. - Readiness probes wait for /api/auth/login to actually 302 (vite serves the SPA for /api/* during cold compile); submenu interactions wait for the loaded sub-content before clicking.
Showing the changes to apps/cloud/src/engine/execution-stack.ts (1 of 22 files). Show all
Unified · Split
| @@ -62,6 +62,7 @@ export const CloudPluginsProvider: Layer.Layer<PluginsProvider> = Layer.succeed( · 61 unmodified lines | ||
| 62 | 62 | workosCredentials: { |
| 63 | 63 | apiKey: env.WORKOS_API_KEY, |
| 64 | 64 | clientId: env.WORKOS_CLIENT_ID, |
| 65 | + apiUrl: env.WORKOS_API_URL, | |
| 65 | 66 | }, |
| 66 | 67 | }), |
| 67 | 68 | }); |