Function cloudTarget

e2e/targets/cloud.ts:60–118

()

};

export const cloudTarget = (): Target => ({
  name: "cloud",
  baseUrl: CLOUD_BASE_URL,
  mcpUrl: `${CLOUD_BASE_URL}/mcp`,
  capabilities: new Set(["api", "browser", "billing", "mcp-oauth"]),
  // Cloud's authorization server is the WorkOS emulator, so token-expiry
  // scenarios can compress the lifecycle (the TtlControl service).
  setAccessTokenTtl: (seconds) =>
    Effect.promise(async () => {
      const workos = await connectEmulator({
        baseUrl: `http://127.0.0.1:${WORKOS_EMULATOR_PORT}`,
      });
      await workos.seed({ oauth: { default_access_token_ttl_seconds: seconds } });
    }),
  newIdentity: ({ org = true } = {}) =>
    Effect.promise(async (): Promise<Identity> => {
      const label = `user-${randomUUID().slice(0, 8)}`;
      const email = `${label}@e2e.test`;
      let session = await signIn(email);
      if (org) {
        // The real create-organization flow; the refreshed sealed session in
        // the response carries the new org.
        const response = await fetch(new URL("/api/auth/create-organization", CLOUD_BASE_URL), {
          method: "POST",
          headers: {
            "content-type": "application/json",
            origin: new URL(CLOUD_BASE_URL).origin,
            cookie: session,
          },
          body: JSON.stringify({ name: `Org ${label}` }),
        });
        if (!response.ok) {
          throw new Error(`cloud newIdentity: create-organization failed (${response.status})`);
        }
        session = cookiePair(response, "wos-session") ?? session;
      }
      const [name, value] = session.split(/=(.*)/s);
      return {
        label: email,
        headers: { cookie: session },
        cookies: [{ name: name!, value: value! }],
        credentials: { email, password: "emulated" },
      };
    }),
  // MCP OAuth against the emulator's authorization server: complete the
  // hosted flow headlessly as this identity.
  mcpConsent: (identity) => async (request) => {
    const authorizeUrl = new URL(request.authorizationUrl);
    authorizeUrl.searchParams.set("login_hint", identity.credentials?.email ?? "mcp@e2e.test");
    const response = await fetch(authorizeUrl, { redirect: "manual" });
    const location = response.headers.get("location");
    if (response.status !== 302 || !location) {
      throw new Error(`cloud mcpConsent: authorize did not redirect (${response.status})`);
    }
    const code = new URL(location).searchParams.get("code");
    if (!code) throw new Error("cloud mcpConsent: no code in redirect");
    return { code };
  },