Function providerLayer

apps/cloud/src/auth/mirror-feeders.node.test.ts:1125–1167

(
    org: string,
    deleted: string[],
    options: {
      readonly workos?: Partial<WorkOSClientService>;
      readonly autumn?: Layer.Layer<AutumnService>;
    } = {},
  )

   * body so the postgres socket outlives the provider call under test.
   */
  const providerLayer = (
    org: string,
    deleted: string[],
    options: {
      readonly workos?: Partial<WorkOSClientService>;
      readonly autumn?: Layer.Layer<AutumnService>;
    } = {},
  ) => {
    const workos = stubWorkOS({
      ...options.workos,
      deleteOrgMembership: (membershipId) =>
        Effect.sync(() => {
          deleted.push(membershipId);
        }),
      updateOrgMembershipRole: (membershipId, roleSlug) =>
        Effect.succeed(
          workosMembership(TARGET, org, {
            id: membershipId,
            role: { slug: roleSlug },
            updatedAt: T2,
          }) as never,
        ),
    });
    // The test database serves ONE connection at a time, so the seed, the
    // provider, and the directory read all share this layer's socket.
    const stores = Layer.mergeAll(
      UserStoreService.Live,
      WorkOsMirror.Live,
      cloudMemberDirectoryLayer,
    );
    return workosAccountProvider.pipe(
      Layer.provide(
        Layer.mergeAll(
          workos,
          stubApiKeys,
          options.autumn ?? stubAutumn,
          Layer.succeed(AccountCaller)({ session: session(ADMIN) }),
        ),
      ),
      Layer.provideMerge(stores),
      Layer.provide(DbService.Live),
    );
  };

  // ADMIN as the org's admin and TARGET as an existing member of `org`,
  // seeded through the live mirror — the rows the provider's membership reads