Function use

apps/cloud/src/auth/workos.ts:344–349

(op: string, fn: (wos: WorkOS) => Promise<A>)

  // span reads `workos.<operation>` instead of one undifferentiated "workos"
  // bucket, and failures log which call actually failed.
  const use = <A>(op: string, fn: (wos: WorkOS) => Promise<A>) =>
    withServiceLogging(
      `workos.${op}`,
      workosErrorFromFailure,
      tryPromiseService(() => fn(workos)),
    );

  const authenticateSealedSession = (sessionData: string) =>
    Effect.gen(function* () {