| 1 | // Cloud-only: the WorkOS login → AuthKit → callback session contract, driven |
| 2 | // over the wire against the real handlers (AuthKit is the emulator). The happy |
| 3 | // path itself is what `newIdentity()` performs on every scenario — these |
| 4 | // scenarios pin the EDGE guarantees around it: the CSRF state handshake, the |
nothing calls this directly
no test coverage detected