2 Commits

Author	SHA1	Message	Date
Matheus	d66170c795	feat: implement tenant isolation with PostgreSQL RLS ... - users + tenant_memberships tables (tenant-scoped) - RLS policy on tenant_memberships using set_config('app.current_tenant_id', ...) - withTenantContext() helper for transaction-scoped tenant context - separate non-superuser app role (b2bcall_app): the default Docker postgres user is SUPERUSER and always bypasses RLS even with FORCE, so the app must never connect through the migration/owner role. Documented in docs/TENANT_ISOLATION.md. - automated isolation test proving tenant A never sees tenant B's data	2026-08-28 05:47:23 -03:00
Matheus	d1addb0a31	feat: add typescript monorepo with pnpm workspaces and prisma database package ... - root package.json + pnpm-workspace.yaml + tsconfig.base.json - packages/types: canonical enums (TenantStatus, AgentState) - packages/shared: re-exports types, base for future utilities - packages/database: Prisma 7 schema with driver adapter (pg), initial tenants table matching agente.md section 29, first migration applied	2026-08-27 23:22:38 -03:00