Function tombstone

apps/cloud/src/auth/workos-mirror-store.ts:512–515

(deletedAt: Date | null)

// holds none (see `deleteMembership`). `workos_updated_at` is left as it is
// — the tombstone is protected by the deleted id, not by its stamp.
const tombstone = (deletedAt: Date | null) => ({
  status: "inactive" as const,
  deletedAt: deletedAt === null ? sql`now()` : instant(deletedAt),
});

// Which stored membership rows a payload for membership `id` stamped
// `updatedAt` may overwrite. A row WorkOS still holds (`deleted_at` null) is