简体中文 | English

dsh-multi-tenant

Composable multi-tenant plugin primitives for
DeepSeek Harness (DSH).

Phase: kernel prerelease line. 0.1.0-rc.1 is publicly published; the
current convergence candidate is 0.1.0-rc.2. The DSH target remains
0.1.0-rc.7. See ROADMAP.md and
docs/reference/release.md.

What this is

A plugin family with a small kernel, not a promise to implement an entire
SaaS platform. dsh-multi-tenant owns only the tenant/session primitives this
repository can enforce directly: minimal tenant/user identity, immutable session
ownership, fail-closed authorization, and the TenantSessionStore provider
contract.

Other capabilities enter the project only when their boundary is real and useful.
A DSH/third-party dependency is handled through a minimal contract/conformance
proposal; a surface we cannot reliably enforce is documented as a boundary
instead of being absorbed into a local fork.

Guiding principles

• Control → enforce — strict fail-closed rules with executable invariants.
• Ecosystem → standardize — define the smallest useful seam/contract and collaborate upstream.
• Outside control → bound — state the threat-model/support boundary plainly. Complexity is not evidence.
• Fast-follow prereleases — pin explicit DSH prereleases and revalidate only affected seams.
• One-way dependency — no JWT/PostgreSQL/HTTP/MCP/Redis dependency in the kernel.
• Default ≠ only — replaceable providers prove conformance with the shared contract suite.

Release scope

• dsh-multi-tenant — published kernel: ownership, authorization, store seam, testing utilities.
• dsh-multi-tenant-web — private experimental enforcement spike; production principal binding waits for a DSH request/connection-scope seam.

The 0.1 line does not claim shell/filesystem/process/container/network
isolation, billing/UI/organization management, host-global resource tenancy,
general RBAC, or cross-user team ACLs. Roles/permissions are deliberately not
part of the kernel TenantPrincipal.

Packages

See CONTRIBUTING.md for development policy and
docs/specs/architecture.md for layer ownership.

Development

pnpm install
pnpm typecheck
pnpm test
pnpm build

License

MIT