Function use

apps/cloud/src/auth/workos.ts:341–346

(fn: (wos: WorkOS) => Promise<A>)

  // definitive WorkOS denial (401/403/404 — fail closed) from a transient
  // failure (429/5xx/network — retryable).
  const use = <A>(fn: (wos: WorkOS) => Promise<A>) =>
    withServiceLogging(
      "workos",
      workosErrorFromFailure,
      tryPromiseService(() => fn(workos)),
    );

  const authenticateSealedSession = (sessionData: string) =>
    Effect.gen(function* () {