Function propsForPrincipal

apps/cloud/src/mcp/agent-handler.ts:167–193

(
  request: Request,
  principal: Extract<AuthOutcome, { readonly _tag: "Authenticated" }>["principal"],
  resource: McpResource,
)

};

const propsForPrincipal = (
  request: Request,
  principal: Extract<AuthOutcome, { readonly _tag: "Authenticated" }>["principal"],
  resource: McpResource,
): Effect.Effect<McpSessionProps> =>
  Effect.gen(function* () {
    const propagation = yield* currentPropagationHeaders(request);
    return {
      session: {
        organizationId: principal.organizationId,
        // The org record the live membership check resolved microseconds ago,
        // handed to the session DO so it never opens a connection of its own to
        // re-read it. An unnamed org (no auth plane could resolve one) is
        // omitted rather than sent empty, so the DO can tell "not carried" from
        // "carried, and blank".
        ...(principal.organizationName ? { organizationName: principal.organizationName } : {}),
        ...(principal.organizationSlug ? { organizationSlug: principal.organizationSlug } : {}),
        userId: principal.accountId,
        elicitationMode: readElicitationMode(request),
        artifactsEnabled: readArtifactsEnabled(request),
        searchToolsEnabled: readSearchToolsEnabled(request),
        resource,
        webOrigin: new URL(request.url).origin,
      },
      propagation,
    };
  });

export const makeCloudMcpAgentHandler = () => {
  const serveOptions = {