@agent-team-foundation/first-tree-hub 0.9.8 → 0.9.9

package/dist/drizzle/0023_clients_org_scoping.sql

@@ -0,0 +1,40 @@
+-- Multi-tenancy hardening:
+--   1. Drop dead column `agents.cloud_user_id` (unused since introduction in
+--      0010; never written by any code path).
+--   2. Bind every client to exactly one organization via `clients.organization_id`.
+--
+-- A client is bound to one org for its lifetime — Rule R-RUN and the
+-- `client:register` handshake reject cross-org reuse of a clientId. See
+-- docs/multi-tenancy-hardening-design.md.
+--
+-- Backfill strategy (guarded for safety across environments):
+--   * Current production: exactly one org → UPDATE fills every row.
+--   * Fresh installs / empty DB: clients table is empty → UPDATE is a no-op,
+--     SET NOT NULL succeeds on the empty table.
+--   * Any environment reaching this migration with multi-org data but
+--     unpopulated clients.organization_id: the guard skips the UPDATE, and
+--     SET NOT NULL fails loudly rather than misassigning rows to an
+--     arbitrary org. Operator must backfill manually, then re-run.
+
+ALTER TABLE "agents" DROP COLUMN "cloud_user_id";
+
+--> statement-breakpoint
+ALTER TABLE "clients" ADD COLUMN "organization_id" text;
+
+--> statement-breakpoint
+ALTER TABLE "clients"
+	ADD CONSTRAINT "clients_organization_id_organizations_id_fk"
+	FOREIGN KEY ("organization_id") REFERENCES "organizations"("id")
+	ON DELETE no action ON UPDATE no action;
+
+--> statement-breakpoint
+UPDATE "clients"
+SET "organization_id" = (SELECT "id" FROM "organizations" LIMIT 1)
+WHERE "organization_id" IS NULL
+	AND (SELECT count(*) FROM "organizations") = 1;
+
+--> statement-breakpoint
+ALTER TABLE "clients" ALTER COLUMN "organization_id" SET NOT NULL;
+
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "idx_clients_org" ON "clients" ("organization_id");

package/dist/drizzle/meta/_journal.json

@@ -162,6 +162,13 @@
       "when": 1777161600000,
       "tag": "0022_session_events",
       "breakpoints": true
+    },
+    {
+      "idx": 23,
+      "version": "7",
+      "when": 1777248000000,
+      "tag": "0023_clients_org_scoping",
+      "breakpoints": true
     }
   ]
 }

package/dist/{feishu-CRNUI05I.mjs → feishu-B1Kiq7S6.mjs}

@@ -209,7 +209,6 @@ z.object({
 	inboxId: z.string(),
 	status: z.string(),
 	source: z.string().nullable().optional(),
-	cloudUserId: z.string().nullable().optional(),
 	visibility: agentVisibilitySchema,
 	metadata: z.record(z.string(), z.unknown()),
 	managerId: z.string().nullable(),

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import "./observability-DV_fQKqV-CuLWzBxQ.mjs";
-import { A as checkServerHealth, C as runMigrations, D as checkDocker, E as checkDatabase, F as isDockerAvailable, G as FirstTreeHubSDK, I as stopPostgres, K as SdkError, L as ClientRuntime, M as checkWebSocket, N as printResults, O as checkNodeVersion, P as ensurePostgres, R as createOwner, S as uninstallClientService, T as checkClientConfig, V as blank, W as status, _ as runHomeMigration, b as isServiceSupported, d as promptMissingFields, f as formatCheckReport, h as onboardCreate, j as checkServerReachable, k as checkServerConfig, l as isInteractive, m as onboardCheck, s as startServer, u as promptAddAgent, v as getClientServiceStatus, w as checkAgentConfigs, x as resolveCliInvocation, y as installClientService, z as hasUser } from "./core-DKA6g1lL.mjs";
+import { A as checkServerHealth, B as createOwner, C as runMigrations, D as checkDocker, E as checkDatabase, F as isDockerAvailable, I as stopPostgres, J as FirstTreeHubSDK, K as status, L as ClientRuntime, M as checkWebSocket, N as printResults, O as checkNodeVersion, P as ensurePostgres, R as handleClientOrgMismatch, S as uninstallClientService, T as checkClientConfig, U as blank, V as hasUser, Y as SdkError, _ as runHomeMigration, b as isServiceSupported, d as promptMissingFields, f as formatCheckReport, h as onboardCreate, j as checkServerReachable, k as checkServerConfig, l as isInteractive, m as onboardCheck, s as startServer, u as promptAddAgent, v as getClientServiceStatus, w as checkAgentConfigs, x as resolveCliInvocation, y as installClientService, z as rotateClientIdWithBackup } from "./core-B2YUTpgg.mjs";
 import "./logger-core-BTmvdflj-DhdipBkV.mjs";
-import { a as resolveAccessToken, n as ensureFreshAccessToken, o as resolveServerUrl, r as ensureFreshAdminToken } from "./bootstrap-DWifXj9b.mjs";
-import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-CRNUI05I.mjs";
-export { ClientRuntime, FirstTreeHubSDK, SdkError, bindFeishuBot, bindFeishuUser, blank, checkAgentConfigs, checkClientConfig, checkDatabase, checkDocker, checkNodeVersion, checkServerConfig, checkServerHealth, checkServerReachable, checkWebSocket, createOwner, ensureFreshAccessToken, ensureFreshAdminToken, ensurePostgres, formatCheckReport, getClientServiceStatus, hasUser, installClientService, isDockerAvailable, isInteractive, isServiceSupported, onboardCheck, onboardCreate, printResults, promptAddAgent, promptMissingFields, resolveAccessToken, resolveCliInvocation, resolveServerUrl, runHomeMigration, runMigrations, startServer, status, stopPostgres, uninstallClientService };
+import { a as resolveAccessToken, n as ensureFreshAccessToken, o as resolveServerUrl, r as ensureFreshAdminToken } from "./bootstrap-hh_PkTu6.mjs";
+import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-B1Kiq7S6.mjs";
+export { ClientRuntime, FirstTreeHubSDK, SdkError, bindFeishuBot, bindFeishuUser, blank, checkAgentConfigs, checkClientConfig, checkDatabase, checkDocker, checkNodeVersion, checkServerConfig, checkServerHealth, checkServerReachable, checkWebSocket, createOwner, ensureFreshAccessToken, ensureFreshAdminToken, ensurePostgres, formatCheckReport, getClientServiceStatus, handleClientOrgMismatch, hasUser, installClientService, isDockerAvailable, isInteractive, isServiceSupported, onboardCheck, onboardCreate, printResults, promptAddAgent, promptMissingFields, resolveAccessToken, resolveCliInvocation, resolveServerUrl, rotateClientIdWithBackup, runHomeMigration, runMigrations, startServer, status, stopPostgres, uninstallClientService };