Function emailResolver

apps/cloud/src/admin/admin-users-api.ts:215–234

(organizationId: string, context: Context.Context<WorkOSClient>)

 */
export const emailResolver =
  (organizationId: string, context: Context.Context<WorkOSClient>): AdminEmailResolver =>
  (email) =>
    Effect.gen(function* () {
      const workos = yield* WorkOSClient;
      const memberships = yield* workos.listOrgMembers(organizationId);
      const userIds = memberships.data.map((membership) => membership.userId);

      // Short-circuits on the first match: `Effect.findFirst` stops fetching
      // once a user's email matches, so the common case costs far fewer reads
      // than the member count.
      const match = yield* Effect.findFirst(userIds, (userId) =>
        workos.getUser(userId).pipe(
          Effect.map((user) => normalizeAdminUserEmail(user.email ?? "") === email),
          // One unreadable user must not fail the whole lookup — it simply
          // cannot be the match.
          Effect.catchCause(() => Effect.succeed(false)),
        ),
      );
      return Option.getOrNull(match);
    }).pipe(Effect.provideContext(context));

/** Both directions of cloud's directory, built once per authorized request. */
const userDirectory = (