[2c] Org isolation enforcement - #32

Open

andrmaz wants to merge 10 commits into

cursor/org-isolation-enforcement-cc9c

Commits on Sep 2, 2026

feat(db): add org-scoping Prisma extension for query-layer isolation

cursoragent
and
andrmaz
committed
4889cba
feat(api): enforce org context at the query layer for every request

cursoragent
and
andrmaz
committed
a6ab61d
fix(auth): bypass org scoping explicitly for pre-auth identity lookups

cursoragent
and
andrmaz
committed
bd8f4a8
fix(admin): scope the organizations endpoints to the caller's own org

cursoragent
and
andrmaz
committed
fd847cb
test(mcp): add organization-isolation regression tests

cursoragent
and
andrmaz
committed
1770040

Commits on Sep 5, 2026

Harden org-scoped relation writes and preserve context for lazy thenables
coderabbitai[bot]
committed
03835c5
fix(api): keep the org-context interceptor and jest mock in sync with the now-async runWithOrgContext

cursoragent
and
andrmaz
committed
0b6b02a
test(db): cover in-scope nested parent connects

cursoragent
and
andrmaz
committed
6cc4885
fix(db): fail closed on raw SQL and consume thenables in the unscoped hatch

cursoragent
and
andrmaz
committed
2478af0
test(db): type the fake client's raw-SQL handler lookup without a cast

cursoragent
and
andrmaz
committed
05cc6b4