Feed the cloud membership mirror from login and member writes

[RhysSullivan]

Layer 2 of 5. Cloud only.

• Login callback lists the user's memberships once and uses that list both to choose the landing org and to upsert the user and memberships into the mirror. No new WorkOS calls; the old per-candidate live checks are gone.
• Write-through on createOrganization, acceptInvitation, inviteMember (mirrors the pending membership), removeMember, and updateMemberRole.
• Feeder writes run in one transaction that share-locks the org row and the account row, so a stalled feeder cannot insert past a committed backfill scan, user deletion, or membership deletion.
• One-off backfill apps/cloud/scripts/backfill-workos-mirror.ts (db:backfill-workos-mirror:prod, --dry-run). Records the replay boundary once before its first listing, applies each org's scan atomically with a per-org backfilled_at mark, tombstones memberships WorkOS no longer lists, and stamps a global completion marker. Idempotent. Not run yet.
• Mirror queries live in workos-mirror-store.ts with no Cloudflare imports so the script runs the same upserts under bun.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	73a4cef	Commit Preview URL Branch Preview URL	Sep 16 2026, 05:42 PM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	73a4cef	Sep 16 2026, 05:43 PM

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@2004

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@2004

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@2004

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@2004

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@2004

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@2004

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@2004

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@2004

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@2004

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@2004

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@2004

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@2004

executor

npm i https://pkg.pr.new/executor@2004

commit: 73a4cef