Function makeLocalApiHandler

apps/local/src/app.ts:91–144

(token: string)

 * test seam where a test wants to bypass the boot graph.
 */
export const makeLocalApiHandler = async (token: string): Promise<LocalApiHandler> => {
  const { executor, plugins } = await getExecutorBundle();

  // Build the fixed-execution seam ONCE (one executor + one engine). The same
  // Layer is the `fixedExecution` seam declaration AND lives in `boot` so the
  // fixed middleware's residual `FixedExecutionProvider` resolves there — exactly
  // as self-host declares `db: SelfHostDbProvider` and puts the handle in `boot`.
  const fixedExecution = localFixedExecutionLayer(executor);

  // The authoritative identity gate for the typed `/api`: validates the boot
  // bearer token and resolves the one local Principal. The Bun shell
  // (`serve.ts`) fast-path-rejects unauthenticated requests with the same token.
  const identity = makeLocalIdentityLayer(token);

  const { toWebHandler } = ExecutorApp.make({
    plugins,
    providers: {
      // Single-user: validates the boot bearer token and resolves the one local
      // Principal. Boot-scoped (`RIdentity = never`), captured once.
      identity,
      // The ONE boot executor + engine, served directly — local's fixed
      // execution model (no per-request scoped-executor rebuild).
      fixedExecution,
      // account omitted (local has no account API).
      // mcp omitted (local's /mcp is its own in-process surface in serve.ts).
      errorCapture: ErrorCaptureLive,
    },
    extensions: {
      // Swagger UI at /docs, over the root-mounted spec (matches the served
      // paths — local serves the API at root; the Bun shell strips `/api`).
      routes: [HttpApiSwagger.layer(composePluginApi(plugins), { path: "/docs" })],
    },
    // No mountPrefix: local serves the typed API at root and the Bun shell
    // strips the `/api` prefix before dispatching here. Local renders identity
    // failures as text (matching self-host); the single-user provider never
    // produces one in practice.
    config: { failure: textFailureStrategy },
    // The boot-scoped context provideMerge'd under everything: the identity
    // provider (captured once by the fixed-execution middleware) + the fixed
    // execution seam (the one executor + engine + extension map) + the
    // artifact-usage observer (this HTTP plane is the console UI's data layer,
    // so operations it serves file as `via: "ui"`).
    boot: Layer.mergeAll(
      identity,
      fixedExecution,
      Layer.succeed(ArtifactUsageObserver)((action) =>
        localAnalytics.record(`artifact_${action}`, { via: "ui" }),
      ),
    ),
  });

  const web = toWebHandler();
  return { handler: web.handler, dispose: web.dispose };
};