// ---------------------------------------------------------------------------
// The per-request service layer, in its own module.
// ---------------------------------------------------------------------------
//
// Split out of `./layers` so a module can depend on the per-request postgres
// socket WITHOUT pulling in the protected (plugin) API that `./layers` also
// assembles — `makeProtectedApiLayer(cloudPlugins, …)` drags the whole plugin /
// OpenAPI / GraphQL / MCP / execution-substrate graph in with it. The auth
// plane (`../app-auth`) needs exactly this layer and none of that, so the
// definition lives here and `./layers` re-exports it for existing callers.
// ---------------------------------------------------------------------------

import { Layer } from "effect";

import type { MemberDirectory } from "@executor-js/api/server";

import { UserStoreService } from "../auth/context";
import { cloudMemberDirectoryLayer } from "../auth/member-directory";
import { WorkOsMirror } from "../auth/workos-mirror";
import { DbService } from "../db/db";

const DbLive = DbService.Live;
const UserStoreLive = UserStoreService.Live.pipe(Layer.provide(DbLive));
const WorkOsMirrorLive = WorkOsMirror.Live.pipe(Layer.provide(DbLive));
// The shared `MemberDirectory` read seam over the membership mirror — the
// same per-request socket the mirror writes through.
const MemberDirectoryLive = cloudMemberDirectoryLayer.pipe(Layer.provide(DbLive));

// Per-request layer. Anything that opens an I/O object (postgres.js socket,
// fetch stream readers, anything backed by a `Writable`) MUST live here —
// `provideRequestScoped` rebuilds it per request so Cloudflare Workers'
// I/O isolation is satisfied. See `api.request-scope.test.ts`.
export const RequestScopedServicesLive: Layer.Layer<
  DbService | UserStoreService | WorkOsMirror | MemberDirectory
> = Layer.mergeAll(DbLive, UserStoreLive, WorkOsMirrorLive, MemberDirectoryLive);