feat(ai-persistence, ai-harness): identity and access, with tenants, shared sessions, and a run context by AlemTuzlak · Pull Request #1812 · TanStack/ai

feat(ai-persistence): session index v2 keyed by tenant and thread, with owner, members, and required compare-and-set

AlemTuzlak

committed

263f285

feat(ai-harness): a RunContext for every run, so tools and plugins act as the user who started the run

AlemTuzlak

committed

6a65b6e

feat(ai-harness): access types and the membersOnly() policy

AlemTuzlak

committed

432d342

feat(ai-harness): tenant-keyed index rows, log ids, and media keys

AlemTuzlak

committed

ecc5aa7

feat(ai-harness): host access with a principal-bound handle, sharing, revoke, and handlers that fail closed

AlemTuzlak

committed

3efb02e

docs(ai-harness): access and tenants, shared threads on membersOnly, and the run context

AlemTuzlak

committed

42faa9d

feat(ai-mcp, ai-acp, ai-harness-cli): the MCP server, the ACP agent, and the CLI act as a principal

AlemTuzlak

committed

70e1c5e

fix(ai-harness): every thread-keyed store write carries the tenant

AlemTuzlak

committed

cc5f5ea

fix(ai-harness): delete removes the transcript, session plugins see the owner, host.hasAccess, and events wait for a new thread

AlemTuzlak

committed

799a373

test(ai-e2e): the protocol route on host access, and a shared-thread access spec

AlemTuzlak

committed

f134b9d

test(ai-harness): delete removes the transcript and closes the session

AlemTuzlak

committed

668ee7c

chore(ai-harness-cli): list @tanstack/ai-mcp as a dev dependency for the /mcp test

AlemTuzlak

committed

1e02b85

Merge branch 'feat/harness-api-shape' into feat/harness-access

AlemTuzlak

committed

cfa1721

Navigation Menu

Repository navigation

feat(ai-persistence, ai-harness): identity and access, with tenants, shared sessions, and a run context - #1812

feat(ai-persistence, ai-harness): identity and access, with tenants, shared sessions, and a run context#1812
AlemTuzlak merged 20 commits into
feat/harness-api-shapefrom
feat/harness-access

Commits on Oct 17, 2026

feat(ai-persistence): session index v2 keyed by tenant and thread, with owner, members, and required compare-and-set

feat(ai-harness): a RunContext for every run, so tools and plugins act as the user who started the run

feat(ai-harness): access types and the membersOnly() policy

feat(ai-harness): tenant-keyed index rows, log ids, and media keys

feat(ai-harness): host access with a principal-bound handle, sharing, revoke, and handlers that fail closed

docs(ai-harness): access and tenants, shared threads on membersOnly, and the run context

feat(ai-mcp, ai-acp, ai-harness-cli): the MCP server, the ACP agent, and the CLI act as a principal

fix(ai-harness): every thread-keyed store write carries the tenant

fix(ai-harness): delete removes the transcript, session plugins see the owner, host.hasAccess, and events wait for a new thread

test(ai-e2e): the protocol route on host access, and a shared-thread access spec

test(ai-harness): delete removes the transcript and closes the session

chore(ai-harness-cli): list @tanstack/ai-mcp as a dev dependency for the /mcp test

Merge branch 'feat/harness-api-shape' into feat/harness-access

Commits on Oct 20, 2026

feat(ai-harness): session lifecycle with handles, observe, retention, host plugins, and a purging delete (#1813)

fix(ai-harness): run the rest of an answered turn as the user who sent it

fix(ai-harness): keep the keys of one user out of the shared provider-keys state

fix(ai-harness): explicit access rules, one owner record, and fail-closed child and media checks

docs(ai-harness): explicit access rules, members-only ownership, and signed media that needs a user

feat(ai-harness): access.anonymous gives a guest for a signed media URL with no login

refactor(ai-harness)!: nest the access rules in access.policy