Function authorizeLastOrgSlug

apps/cloud/src/auth/doc-gate.ts:175–192

(
  userId: string,
  slug: string,
)

// canonicalize-onto-session-org behavior. Per-request store layers for the
// same reason as organizationDisplay; both stores share the one socket.
const authorizeLastOrgSlug = async (
  userId: string,
  slug: string,
): Promise<{ readonly id: string } | null> => {
  const dbLive = makeDbLayer();
  const exit = await getRuntime().runPromiseExit(
    authorizeOrganizationSelector(userId, slug).pipe(
      Effect.provide(
        Layer.mergeAll(
          makeUserStoreLayer(),
          makeMemberDirectoryLayer(),
          makeWorkOsMirrorLayer(),
        ).pipe(Layer.provide(dbLive)),
      ),
    ),
  );
  return Exit.isSuccess(exit) ? exit.value : null;
};

const hintSetCookie = (hint: AuthHint) =>
  `${AUTH_HINT_COOKIE}=${encodeAuthHint(hint)}; ${HINT_COOKIE_ATTRIBUTES}; Max-Age=${AUTH_HINT_MAX_AGE_SECONDS}`;