// ---------------------------------------------------------------------------
// Cloud MCP — the auth seam behind the shared host-mcp envelope, slotted into
// the app composition root's `mcp: { auth }`:
//
//   - auth -> cloudMcpAuth (WorkOS JWT + API-key + org-liveness + the two OAuth
//                           discovery docs)
//
// `server.ts` intercepts `/mcp` transport for direct session Durable Object
// dispatch, so the app envelope mounts only cloud's OAuth discovery docs (no
// `sessions` or `reporter` seam). The MCP-path predicate lives in `./mount`
// (`classifyMcpPath` / `prepareMcpOrgScope`), imported directly there. The MCP
// session Durable Object class itself stays a platform-side export (server.ts)
// and imports its siblings directly, NOT this barrel, to keep the DO bundle
// react-start-free.
// ---------------------------------------------------------------------------

// `cloudMcpAuth` is the packaged seam (the WorkOS JWT/api-key auth provider with
// its `McpAuth`/`McpOrganizationAuth` seams provided internally), shaped as the
// `Layer<McpAuthProvider, never, IdentityProvider>` `ExecutorApp.make` expects.
export { cloudMcpAuth } from "./auth-provider";