Read members from the directory and add email search

[RhysSullivan]

Layer 3 of 5 (stack #2008). Answers the customer request for email search on the org users page.

• Both hosts' admin user directories are now adminUserDirectoryFromMembers over the seam. Cloud's per-row WorkOS lookups are deleted.
• ?search= on the admin users endpoints: substring match over email and name, then subjects for those ids with the caller's paging. SDK listSubjects gains an externalIds filter. Exact ?email= still works.
• Cloud listMembers and seat counts read the mirror. Invites also mirror the pending membership so invitees stay visible.
• Search input on the admin users page.
• OrgMember.email is now nullable in the shared contract because a membership can be mirrored before its profile.

Deploy prerequisite (cloud): run bun run --cwd apps/cloud db:backfill-workos-mirror:prod before deploying and confirm its counts against WorkOS. Until the backfill stamps its marker, seat reporting to Autumn is skipped with a warning.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	9815d02	Sep 15 2026, 11:08 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	9815d02	Commit Preview URL Branch Preview URL	Sep 15 2026, 11:06 AM

[github-actions]

Cloudflare preview

Console	https://executor-preview-pr-2005.executor-e2e.workers.dev
MCP	https://executor-preview-pr-2005.executor-e2e.workers.dev/mcp
Deployed commit	9815d02

Sign-in is Cloudflare Access (one-time PIN to an allowed email). The preview has its own database and encryption key; it is destroyed when this PR closes.

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@2005

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@2005

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@2005

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@2005

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@2005

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@2005

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@2005

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@2005

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@2005

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@2005

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@2005

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@2005

executor

npm i https://pkg.pr.new/executor@2005

commit: 9815d02