Function authenticate

apps/cloud/src/mcp/auth-provider.ts:256–277

(request: Request)

     * to Unavailable so the envelope renders the retryable 503 -32001.
     */
    const authenticate = (request: Request): Effect.Effect<AuthOutcome> =>
      auth.verifyBearer(request).pipe(
        Effect.result,
        Effect.flatMap((result) =>
          Result.isFailure(result)
            ? annotateMcpRequest(request, {
                token: null,
                parseBody: false,
              }).pipe(
                Effect.flatMap(() =>
                  Effect.annotateCurrentSpan({
                    "mcp.auth.outcome": "system_error",
                    "mcp.auth.system_error.reason": result.failure.reason,
                    "mcp.auth.system_error.message": String(result.failure.cause).slice(0, 500),
                  }),
                ),
                Effect.as(unavailable("Authentication temporarily unavailable - please retry")),
              )
            : toOutcome(request, result.success),
        ),
        Effect.withSpan("mcp.request"),
      );

    return {
      discoveryRoutes,