Function authorizeLastOrgSlug

apps/cloud/src/auth/doc-gate.ts:172–182

(
  userId: string,
  slug: string,
)

// bare path falls through to today's canonicalize-onto-session-org behavior.
// Per-request store layers for the same reason as organizationDisplay.
const authorizeLastOrgSlug = async (
  userId: string,
  slug: string,
): Promise<{ readonly id: string } | null> => {
  const exit = await getRuntime().runPromiseExit(
    authorizeOrganizationSelector(userId, slug).pipe(
      Effect.provide(Layer.provide(makeUserStoreLayer(), makeDbLayer())),
    ),
  );
  return Exit.isSuccess(exit) ? exit.value : null;
};

const hintSetCookie = (hint: AuthHint) =>
  `${AUTH_HINT_COOKIE}=${encodeAuthHint(hint)}; ${HINT_COOKIE_ATTRIBUTES}; Max-Age=${AUTH_HINT_MAX_AGE_SECONDS}`;