Function makeMcpOrganizationAuthServices

apps/cloud/src/mcp/auth.ts:206–210

()

// call gives each request its own request-scoped socket. `CoreSharedServices`
// (WorkOS, no per-request socket) stays shared.
const makeMcpOrganizationAuthServices = () => {
  const dbLive = makeDbLayer();
  const userStoreLive = makeUserStoreLayer().pipe(Layer.provide(dbLive));
  return Layer.mergeAll(dbLive, userStoreLive, CoreSharedServices);
};

// A URL slug resolves through the mirror to its org id before the membership
// check; an unknown slug authorizes nothing. Ids pass straight through —