Function classifyMcpPath

apps/cloud/src/mcp/mount.ts:79–96

(pathname: string)

 * org-scoped path to the bare path the shared envelope actually routes.
 */
export const classifyMcpPath = (pathname: string): McpRoute => {
  if (pathname === AUTHORIZATION_SERVER_METADATA_PATH) {
    return { kind: "oauth-authorization-server", organizationId: null };
  }
  const segments = pathname.split("/").filter((segment) => segment.length > 0);

  // Protected-resource metadata: `${prefix}/mcp` or `${prefix}/<org>/mcp`. The
  // org sits after the well-known prefix (RFC 9728), not at the path root.
  const prmPrefix = "/.well-known/oauth-protected-resource";
  if (pathname.startsWith(`${prmPrefix}/`)) {
    const matched = matchMcpSuffix(segments.slice(2));
    return matched === undefined ? null : { kind: "oauth-protected-resource", ...matched };
  }

  // MCP transport: `/mcp` or `/<org>/mcp`.
  const matched = matchMcpSuffix(segments);
  return matched === undefined ? null : { kind: "mcp", ...matched };
};

const bareMcpPath = (route: Exclude<McpRoute, null>): string =>
  route.kind === "mcp"