Function enrichUserWithMembership

server/src/utils/html-config.ts:177–216

(user: AppUser | null | undefined)

 * Checks both direct and inherited membership via the brand registry hierarchy.
 */
export async function enrichUserWithMembership(user: AppUser | null | undefined): Promise<AppUser | null | undefined> {
  if (!user?.id || user.isMember !== undefined) return user;
  try {
    const pool = getPool();

    // Try primary_organization_id first (fast path)
    const result = await pool.query(
      `SELECT u.primary_organization_id
       FROM users u
       WHERE u.workos_user_id = $1
         AND u.primary_organization_id IS NOT NULL`,
      [user.id]
    );

    let orgId: string | null = result.rows[0]?.primary_organization_id ?? null;

    // Fall back to organization_memberships if primary_organization_id is not set.
    // This handles users who signed up after the initial backfill migration.
    if (!orgId) {
      orgId = await resolvePreferredOrganization(user.id);

      // Backfill primary_organization_id so future lookups use the fast path
      if (orgId) {
        backfillPrimaryOrganization(user.id, orgId).catch((err) => {
          logger.warn({ error: err, userId: user.id }, 'Best-effort backfill of primary_organization_id failed');
        });
      }
    }

    if (orgId) {
      const membership = await resolveEffectiveMembership(orgId);
      user.isMember = membership.is_member;
    } else {
      user.isMember = false;
    }
  } catch {
    user.isMember = false;
  }
  return user;
}

/**
 * Serve an HTML file with app config injected.