Fix tenant isolation for project skills. Project-skill add/remove/list operations now constrain both the project and referenced skill to the active tenant when tenant context is present, preventing cross-tenant visibility and assignment.
Verification
go test ./internal/store -v — passed
go test ./internal/tools -v — passed
go test ./internal/store ./internal/tools — passed
git diff --check — passed
Full go test ./... was attempted by the worker but is blocked by repository environment/setup issues (missing ui/dist and sandbox-restricted test listener sockets).
Model selection: Tuesday primary Claude Code claude-sonnet-4-6 failed before repository access with OAuth HTTP 401; Codex gpt-5.5 completed the implementation, and the dispatcher independently verified the focused tests, commit, and remote SHA.
## Summary
Fix tenant isolation for project skills. Project-skill add/remove/list operations now constrain both the project and referenced skill to the active tenant when tenant context is present, preventing cross-tenant visibility and assignment.
## Verification
- `go test ./internal/store -v` — passed
- `go test ./internal/tools -v` — passed
- `go test ./internal/store ./internal/tools` — passed
- `git diff --check` — passed
- Full `go test ./...` was attempted by the worker but is blocked by repository environment/setup issues (missing `ui/dist` and sandbox-restricted test listener sockets).
Model selection: Tuesday primary Claude Code `claude-sonnet-4-6` failed before repository access with OAuth HTTP 401; Codex `gpt-5.5` completed the implementation, and the dispatcher independently verified the focused tests, commit, and remote SHA.
Closes #42
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Fix tenant isolation for project skills. Project-skill add/remove/list operations now constrain both the project and referenced skill to the active tenant when tenant context is present, preventing cross-tenant visibility and assignment.
Verification
go test ./internal/store -v— passedgo test ./internal/tools -v— passedgo test ./internal/store ./internal/tools— passedgit diff --check— passedgo test ./...was attempted by the worker but is blocked by repository environment/setup issues (missingui/distand sandbox-restricted test listener sockets).Model selection: Tuesday primary Claude Code
claude-sonnet-4-6failed before repository access with OAuth HTTP 401; Codexgpt-5.5completed the implementation, and the dispatcher independently verified the focused tests, commit, and remote SHA.Closes #42