Function resolveExecutorServerConnection

apps/cli/src/main.ts:787–852

(
  target: ServerTarget,
)

  });

const resolveExecutorServerConnection = (
  target: ServerTarget,
): Effect.Effect<ExecutorServerConnection, Error, FileSystem.FileSystem | PlatformPath.Path> =>
  Effect.gen(function* () {
    const requestedResult = yield* resolveRequestedExecutorServerConnection(target);
    const active = yield* readActiveLocalServerManifest();
    const decision = chooseCliServerConnectionWithActiveLocal({
      requested: requestedResult.connection,
      source: requestedResult.source,
      active,
    });

    if (decision.kind === "conflict") {
      return yield* Effect.fail(
        new Error(
          [
            `A local Executor ${decision.active.kind} is already running at ${decision.active.connection.origin} (pid ${decision.active.pid}).`,
            `It owns the current data directory: ${decision.active.dataDir}`,
            "Refusing to auto-start another local server against the same database.",
            `Use the active server, or stop it before starting ${cliPrefix} daemon run.`,
          ].join("\n"),
        ),
      );
    }

    const requested = yield* refreshOAuthConnection(decision.connection);
    if (decision.kind === "use-active") return requested;

    if (!canAutoStartCliServerConnection(requested)) {
      // An authenticated remote connection (oauth device-login, bearer key, or
      // basic password): use it directly. The /api/health liveness probe is only
      // a gate for the local auto-start decision and isn't necessarily exposed
      // by hosted servers, the real API call surfaces any connectivity/auth
      // error with proper context.
      if (requested.auth) return requested;
      if (yield* isServerReachable(requested.origin)) {
        return requested;
      }
      return yield* Effect.fail(
        new Error(
          [
            `Executor server is not reachable at ${requested.origin}.`,
            "For hosted Executor, set EXECUTOR_API_KEY to a bearer API key.",
            "For local or desktop servers, set EXECUTOR_AUTH_TOKEN to the server's bearer token.",
          ].join("\n"),
        ),
      );
    }

    const daemonUrl = yield* ensureDaemon(requested.origin);
    // The daemon we just ensured published a manifest carrying its bearer token
    // (minted into auth.json). Prefer that authed connection — otherwise the
    // next API call hits the now-gated server with no credential and 401s.
    const started = yield* readActiveLocalServerManifest().pipe(Effect.orElseSucceed(() => null));
    const daemonOrigin = normalizeExecutorServerConnection({ origin: daemonUrl }).origin;
    const startedOrigin = started
      ? normalizeExecutorServerConnection({ origin: started.connection.origin }).origin
      : null;