Function sessionHandler

apps/cloud/src/auth/mirror-feeders.node.test.ts:572–606

(
    userId: string,
    options: {
      readonly workos?: Partial<WorkOSClientService>;
      readonly services?: Layer.Layer<
        DbService | UserStoreService | WorkOsMirror | MemberDirectory
      >;
      readonly autumn?: Layer.Layer<AutumnService>;
    } = {},
  )

   * layer, so a test can fail one store call on purpose.
   */
  const sessionHandler = (
    userId: string,
    options: {
      readonly workos?: Partial<WorkOSClientService>;
      readonly services?: Layer.Layer<
        DbService | UserStoreService | WorkOsMirror | MemberDirectory
      >;
      readonly autumn?: Layer.Layer<AutumnService>;
    } = {},
  ) =>
    HttpRouter.toWebHandler(
      HttpApiBuilder.layer(NonProtectedApi).pipe(
        Layer.provide(Layer.mergeAll(CloudAuthPublicHandlers, CloudSessionAuthHandlers)),
        Layer.provide(
          requestScopedMiddleware(Layer.mergeAll(options.services ?? RequestScopedServicesLive))
            .layer,
        ),
        Layer.provideMerge(SessionAuthLive),
        Layer.provideMerge(options.autumn ?? stubAutumn),
        Layer.provideMerge(
          stubWorkOS({
            ...options.workos,
            authenticateSealedSession: () =>
              Effect.succeed({
                userId,
                email: `${userId}@placeholder.test`,
                organizationId: null,
              } as never),
          }),
        ),
        Layer.provideMerge(HttpServer.layerServices),
        Layer.provideMerge(RouterConfigLive),
      ),
      { disableLogger: true },
    ).handler;

  /** The org row as the mirror holds it, or null once purged. */
  const readOrganization = (org: string) =>