Read members from the directory and add email search

[RhysSullivan]

Layer 4 of 5. Answers the customer request for email search on the org users page.

• Both hosts' admin user directories are now adminUserDirectoryFromMembers over the seam. Cloud's per-row WorkOS lookups are deleted.
• ?search= on the admin users endpoints: substring match over email and name, then subjects for those ids with the caller's paging. SDK listSubjects gains an externalIds filter. Exact ?email= still works.
• Cloud listMembers and seat counts read the mirror. An org whose row has no backfilled_at mark gets a one-time on-demand scan first, so counts are never partial.
• Search input on the admin users page.
• OrgMember.email is now nullable in the shared contract because a membership can be mirrored before its profile.

Deploy prerequisite (cloud): run bun run --cwd apps/cloud db:backfill-workos-mirror:prod before deploying and confirm its counts against WorkOS.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	787569e	Sep 16 2026, 04:28 PM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	787569e	Commit Preview URL Branch Preview URL	Sep 16 2026, 04:26 PM

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@2005

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@2005

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@2005

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@2005

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@2005

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@2005

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@2005

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@2005

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@2005

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@2005

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@2005

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@2005

executor

npm i https://pkg.pr.new/executor@2005

commit: 9815d02

[RhysSullivan]

Recreated with the correct base after the stack was reordered (reconciler now sits below readers).