GuoMonth/dsh-multi-tenant

README 摘要

dsh-multi-tenant Multi-tenant SaaS extension for DeepSeek Harness (DSH): tenant identity, session ownership, authorization boundaries, tenant-aware MCP, and audit. Status: early development / architecture bootstrap. This repository implements the multi-tenant core contract only. It is not a complete SaaS security solution — see What this core is not. What this core does Given an authenticated TenantPrincipal , dsh-multi-tenant owns and authorizes access to opaque DSH session ids through a fail-closed, durable-store-compatible ownership contract. Concretely, it provides two Cordis services — ctx.tenantSessionStore (the ownership-storage seam) and ctx.multiTenant (ownership + authorization) — that together: - abstracts the authenticated principal ( TenantPrincipal ), - owns sessions with claim-once, immutable ownership, - enforces the tenant boundary unconditionally (no role crosses it), - authorizes fail-closed (unknown and foreign sessions are both denied), - defines a storage seam ( TenantSessionStore ) so ownership persistence can move to a durable store without a breaking API change. What this core is not - ❌ Authentication / HTTP transport (no JWT, cookies, web login) - ❌ Trans…

分类