Function profiles

apps/cloud/src/auth/workos-events-sync.node.test.ts:195–201

(reads: string[] = [])

 * the strict stub above would die on it. Records each read in `reads`.
 */
const profiles = (reads: string[] = []): Partial<WorkOSClientService> => ({
  getUser: (userId) =>
    Effect.sync(() => {
      reads.push(userId);
      return workosUser(userId);
    }),
});

const DbLive = DbService.Live;
// The authorization checks below always read the mirror, never WorkOS.