Function workosForCaller

apps/cloud/src/org/handlers.test.ts:237–251

(deleted: string[])

// delete. `stubWorkOS` dies on anything else, so a `listUserMemberships` call
// would fail the test — membership is never re-checked against WorkOS.
const workosForCaller = (deleted: string[]) =>
  stubWorkOS({
    authenticateSealedSession: () =>
      Effect.succeed({
        userId: CALLER,
        email: "caller@placeholder.test",
        organizationId: ORG,
      }),
    getOrganizationDomain: () =>
      Effect.succeed({ id: DOMAIN, organizationId: ORG, domain: "acme.test" }),
    deleteOrganizationDomain: (domainId: string) =>
      Effect.sync(() => {
        deleted.push(domainId);
      }),
  });

const orgApp = (role: "admin" | "member", workos: Layer.Layer<WorkOSClient>) => {
  const rsLive = Layer.mergeAll(stubDb, stubUsers, stubDirectory(role), stubMirror);