Function identityDirectory

apps/cloud/src/admin/admin-users-api.ts:153–186

(organizationId: string, context: Context.Context<WorkOSClient>)

 */
const identityDirectory =
  (organizationId: string, context: Context.Context<WorkOSClient>): AdminIdentityDirectory =>
  (externalIds) =>
    Effect.gen(function* () {
      const workos = yield* WorkOSClient;
      const memberships = yield* workos.listOrgMembers(organizationId);
      const wanted = new Set(externalIds);
      const memberIds = memberships.data
        .map((membership) => membership.userId)
        .filter((userId) => wanted.has(userId));

      const resolved = yield* Effect.all(
        memberIds.map((userId) =>
          workos.getUser(userId).pipe(
            Effect.map(
              (user) =>
                [
                  userId,
                  {
                    email: user.email,
                    displayName: [user.firstName, user.lastName].filter(Boolean).join(" ") || null,
                  },
                ] as const,
            ),
            // One unreadable user must not cost the whole page its names.
            Effect.catchCause(() => Effect.succeed(null)),
          ),
        ),
        { concurrency: IDENTITY_CONCURRENCY },
      );

      const identities = new Map<string, AdminUserIdentity>();
      for (const entry of resolved) if (entry) identities.set(entry[0], entry[1]);
      return identities;
    }).pipe(Effect.provideContext(context));

/**
 * Cloud's REVERSE directory lookup: email → the WorkOS `user_...` id.