refactor(helix-org): org redesign — multi-tenant + streams + chart UX - #2516

Merged

philwinder merged 157 commits into

mainfrom

refactor/helix-org-redesign

Jun 4, 2026

Commits on Jun 2, 2026

docs(helix-org): add DDD redesign analysis under design/2026-05-21-redesign/
philwinder
committed
bb5ad1e
refactor(helix-org): pin terminology (ADR-0001) and align CLAUDE.md/CLI with embedded reality

philwinder
and
claude
committed
686a8a2
docs(helix-org): pin TDD-with-characterisation-tests and canonical-location rules

philwinder
and
claude
committed
634f5b6
test(api/pkg/org/transport): characterise transport behaviour before B1 lift

philwinder
and
claude
committed
b49295f
docs(helix-org): pin no-switch-on-discriminator OOP rule in CLAUDE.md

philwinder
and
claude
committed
99503e8
refactor(api/pkg/org/transport): lift transport types with strategy-pattern design (B1)

philwinder
and
claude
committed
c461138
refactor(api/pkg/org): lift Role + distribute org-graph IDs to per-concept packages (B7)

philwinder
and
claude
committed
b771de4
chore(helix-org): delete the standalone CLI binary (H7)

philwinder
and
claude
committed
33aa8ad
refactor(api/pkg/org/broadcast): lift wake-only broadcaster to canonical home (H2)

philwinder
and
claude
committed
71dbe05
refactor(api/pkg/org/broadcast): rename Broadcaster -> Hub (avoid -er suffix)

philwinder
and
claude
committed
aad3bc0
refactor(api/pkg/org): lift Runtime port + distribute its prerequisites (B3)

philwinder
and
claude
committed
61e1867
updated plans
philwinder
committed
6505552
test(helix-org/tools): characterise hire_worker side-effect order
philwinder
committed
c5e4854
test(helix-org/agent/helix): characterise ProjectApplier.Ensure
philwinder
committed
85e13b5
test(helix-org/agent/helix): characterise Workspace.MirrorFile intent
philwinder
committed
7c4bba5
test(helix-org/agent/helix): augment spawner_test for SubscribeUpdates parity
philwinder
committed
a9c51b4
test(helix-org/server/chat): augment helix_bridge_test for owner-chat
philwinder
committed
ea8f839
feat(api/pkg/org/runtime): add HireHandler port
philwinder
committed
c5443b1
refactor(api/pkg/org/runtime/helix): lift state.go to canonical home
philwinder
committed
aa2e519
feat(api/pkg/org/runtime/helix): add helix HireRecorder
philwinder
committed
6959f81
refactor(helix-org/tools): wire HireHandler into hire_worker
philwinder
committed
1722a59
refactor(api/pkg/org/runtime/helix): lift auth-context helpers (H1.0)
philwinder
committed
560629a
refactor(api/pkg/org/runtime/helix): lift workspace + replace PutFile with git servicer (H1.1)
philwinder
committed
98c80b9
refactor(api/pkg/org/runtime/helix): lift project + introduce ProjectService port (H1.2)
philwinder
committed
488cb24
refactor(api/pkg/org/runtime/helix): lift EntryStream + EnsureAndSend (H1.3a)
philwinder
committed
fb6cd47
feat(api/pkg/org/runtime/helix): substitute pubsub for WebSocket session subscription (H1.3b)
philwinder
committed
34e6a7c
docs(api/pkg/org/runtime/helix): pin SessionClient port semantics (H1.3c)
philwinder
committed
6465c48
refactor(api/pkg/org/runtime/helix): lift spawner + swap to in-process pubsub (H1.3d)
philwinder
committed
ffaacbf
docs(helix-org): pin helixclient transitional state + deferred H1.4
philwinder
committed
0e13069
refactor(helix-org): address review comments on B4/H1
philwinder
committed
56916e6
refactor(helix-org): never re-export; qualify foreign types at the call site
philwinder
committed
b1d0cb9
refactor(helix-org): delete dead claude invocation sites (B9)

philwinder
and
claude
committed
02ad915
refactor(api/pkg/org/activation): lift ActivationStreamID (B5.1)

philwinder
and
claude
committed
b1a1a57
feat(api/pkg/org/activation): typed Outcome VO + marker (B5.2)

philwinder
and
claude
committed
893f1ec
feat(api/pkg/org/activation): typed TranscriptSegment VO (B5.3)

philwinder
and
claude
committed
2c83bb9
feat(api/pkg/org/activation): Activation aggregate + Repository port (B5.4)

philwinder
and
claude
committed
00cc408
feat(helix-org/store): sqlite-backed activation.Repository (B5.5)

philwinder
and
claude
committed
fed787a
feat(api/pkg/org/runtime/helix): persist Activation rows per spawn (B5.6)

philwinder
and
claude
committed
b1256ad
feat(helix-org/tools): worker_log activationId filter (B5.7)

philwinder
and
claude
committed
b41b882
feat(helix-org/tools): hire_worker returns activation_id (B5.8)

philwinder
and
claude
committed
ef1a3ff
refactor(helix-org): single activation-Stream creation site (B5.9)

philwinder
and
claude
committed
d900fd7
refactor(api/pkg/org/activation): extract per-Worker Queue (B5.10)

philwinder
and
claude
committed
45ea26f
feat(helix-org/server/chat): owner-chat Activation rows (B5.11)

philwinder
and
claude
committed
040ff1c
refactor(helix-org/server/chat): decouple bridge from "owner" (B5.12)

philwinder
and
claude
committed
088c790
feat(api/pkg/org/principal): Principal VO + strict dispatcher parse (B6.1, B6.2)

philwinder
and
claude
committed
37adef0
feat(api/pkg/org/{message,domain}): typed Principal accessors (B6.3)

philwinder
and
claude
committed
6520856
refactor(api/pkg/org/config): lift config registry to canonical home (H3)

philwinder
and
claude
committed
cf09d1e
refactor(api/pkg/org/store): lift store package to canonical home (H4.1)

philwinder
and
claude
committed
06c4763
feat(api/pkg/org/store): dialect-agnostic OpenWithDB + Postgres impl (H4.2, H4.3)

philwinder
and
claude
committed
dc0bf6e
feat(api/pkg/server): wire helix_org to Postgres, drop fs requirement (H4.4)

philwinder
and
claude
committed
2a89760
docs(helix-org): mark landed migrations in 09-integration-reframe + CLAUDE.md (B11)

philwinder
and
claude
committed
bb50001
feat(helix-org/domain, api/pkg/org/store/sqlite): Worker.OrganizationID (H5.1)

philwinder
and
claude
committed
446a1cb
feat(helix-org/bootstrap): OwnerWorker carries OrgID (H5.2)

philwinder
and
claude
committed
8f96d4d
feat(helix-org/tools): hire_worker inherits caller's OrgID (H5.3)

philwinder
and
claude
committed
6e3446a
feat(api/pkg/org/runtime/helix): HelixIdentity VO + context (H6.1)

philwinder
and
claude
committed
e12d730
feat(api/pkg/server): build HelixIdentity in withHelixUserBearer middleware (H6.2)

philwinder
and
claude
committed
a3ce148
refactor(api/pkg/org/agent): lift agent package to canonical home (H8.1)

philwinder
and
claude
committed
2a50726
refactor(api/pkg/org/prompts): lift prompts package to canonical home (H8.2)

philwinder
and
claude
committed
0b11915
refactor(api/pkg/org/dispatch): lift dispatcher to canonical home (H8.3)

philwinder
and
claude
committed
631abc9
refactor(api/pkg/org/bootstrap): lift bootstrap to canonical home (H8.4)

philwinder
and
claude
committed
4657ea1
refactor(api/pkg/org/transports): lift transports to canonical home (H8.5)

philwinder
and
claude
committed
6f8a640
refactor(api/pkg/org/tools): lift tools to canonical home (H8.6)

philwinder
and
claude
committed
6af9789
refactor(api/pkg/org/domain): lift domain types to canonical home (H8.7)

philwinder
and
claude
committed
198bf29
refactor(api/pkg/org/helixclient): lift helixclient to canonical home (H8.8)

philwinder
and
claude
committed
b948fbd
refactor(api/pkg/org/server): lift server tree to canonical home (H8.9)

philwinder
and
claude
committed
5172282
docs(helix-org): mark H5+H6+H8 landed in design index + CLAUDE.md

philwinder
and
claude
committed
3b30355
chore(helix-org): remove old unused files.
philwinder
committed
b70ff00
feat(api/pkg/server): in-process ProjectService + SpawnerClient adapters (H1.3c)
philwinder
committed
050a3f9
feat(api/pkg/org/server/chat): extract ChatBridgeClient port (H1-chat)
philwinder
committed
a06ba97
refactor(api/pkg/org): delete helixclient package (H1.4)
philwinder
committed
323dde0
refactor(api/pkg/org): replace broadcast with pubsub-backed streamhub (H2)
philwinder
committed
ed346ab
feat(api/pkg/org/server): JSON API handlers for org graph/settings/streams (Phase A of UI migration)
philwinder
committed
6145676
feat(frontend): React pages for helix-org chart/workers/settings/streams (Phase B of UI migration)

philwinder
and
claude
committed
c1cb49c
refactor(api/pkg/org/server): delete htmx SSR UI (Phase C of UI migration)
philwinder
committed
190122a
refactor(api/pkg/org/store): drop sqlite, use Postgres for org store tests too

philwinder
and
claude
committed
5dcf15d
refactor(api/pkg/org/server): delete dead chat package
philwinder
committed
5a739cb
fix(api/pkg/org/store): namespace org tables with org_ prefix
philwinder
committed
818c557
refactor(api/pkg/org): multi-tenant store schema with composite (id, org_id) PKs

philwinder
and
claude
committed
da4bc01
refactor(api/pkg/org): plumb orgID through tools + bootstrap + runtime/helix

philwinder
and
claude
committed
be48939
docs(design): handoff for org-scoping refactor

philwinder
and
claude
committed
8ada5d0
refactor(api/pkg/org): thread orgID through runtime, dispatch, handlers

philwinder
and
claude
committed
39b79aa
refactor(frontend): per-org URLs for helix-org pages

philwinder
and
claude
committed
3c1a99a
fix(api/pkg/org/store): include org_id in stream uniqueIndex

philwinder
and
claude
committed
b6e007e
chore: untrack browser screenshots from playwright
philwinder
committed
89124ba
chore: gitignore browser screenshots
philwinder
committed
de5b69d
docs(design): status of org-scoping refactor — verified end-to-end on localhost
philwinder
committed
dbc9ace
test(api/pkg/org): pass orgID to constructors and store methods across test suite

philwinder
and
claude
committed
14cf79f
test(api/pkg/org/bootstrap): require OrganizationID

philwinder
and
claude
committed
c49152e
chore: untrack additional browser screenshots
philwinder
committed
d630d92
refactor(api/pkg/org): drop /helix-org infix, add roles+positions CRUD, switch tests to in-mem store

philwinder
and
claude
committed
e146197
chore: clean up dead code and screenshots from org-scoping refactor

philwinder
and
claude
committed
b9b2464
refactor(api/pkg/org/store): introduce kodit-style generic Repository[D, R]

philwinder
and
claude
committed
8ebd05e
refactor(api/pkg/org/store/gorm): migrate every repo to generic Repository[D, R]

philwinder
and
claude
committed
f72ce93

Commits on Jun 3, 2026

refactor(api/pkg/org): DDD restructure into domain/infrastructure/application/interfaces

philwinder
and
claude
committed
371e5cf
refactor(api/pkg/org/infrastructure/persistence/gorm): migrate worker_runtime to generic Repository

philwinder
and
claude
committed
48d1f10
refactor(frontend): trim helix-org UI to the chart + promote it to top-level nav

philwinder
and
claude
committed
f46a27e
refactor(frontend): rebuild helix-org chart page to match Projects layout

philwinder
and
claude
committed
ba54243
docs(api/pkg/org): add QA.md test plan for the chart UI

philwinder
and
claude
committed
91ed77d
feat(api/pkg/org, frontend): role groups in chart + cascade-delete role/position

philwinder
and
claude
committed
d2d94f2
refactor(frontend): restore ReactFlow chart with top-down dagre + role→position edges

philwinder
and
claude
committed
639e841
refactor(frontend): chart roles as subflow parents with worker-to-worker edges

philwinder
and
claude
committed
b9289ba
fix(frontend): prevent role frame overlap in chart layout

philwinder
and
claude
committed
04412e8
fix(frontend): position-inside-role centering + clickable hire/delete buttons

philwinder
and
claude
committed
cd6200b
feat(frontend): chart drag-and-drop reparenting + add-role-below button

philwinder
and
claude
committed
a6e2fae
refactor(frontend): flat roles + edges-as-hierarchy chart model

philwinder
and
claude
committed
b395817
fix(frontend): switch reporting edges from smoothstep to bezier

philwinder
and
claude
committed
90b641b
docs(org): rewrite QA.md for flat-roles + edges-as-hierarchy chart

philwinder
and
claude
committed
299f623
fix(api): wire ProjectService through helix-org spawner

philwinder
and
claude
committed
6d160e2
feat(frontend): role click opens a side drawer with role details

philwinder
and
claude
committed
7b140f8
feat(frontend): roles list + role-detail editor pages

philwinder
and
claude
committed
6cf58c4
feat(api,frontend): tools catalogue endpoint + role-editor multi-select

philwinder
and
claude
committed
d174682
fix(api/org/bootstrap): seed r-owner.Tools manifest with default grants

philwinder
and
claude
committed
9d07292
docs(org/QA): roles list page + r-owner bootstrap check + add-tool-to-role flow

philwinder
and
claude
committed
a5f285c
fix(api/org/runtime/helix): guard fakePubSub map with mutex to stop CI panic

philwinder
and
claude
committed
dec6fba
feat(api,frontend): workers list + detail pages with fresh-session chat link

philwinder
and
claude
committed
9c85869
feat(api,frontend): provision worker agent app on first chat click

philwinder
and
claude
committed
b63d251
docs(org/QA): workers list page + chat-with-owner flow

philwinder
and
claude
committed
d581db3
fix(desktop): let zed_external sessions launch without HELIX_REPOSITORIES + claude-subscription default_model

philwinder
and
claude
committed
faa19c3
chore(frontend): regenerate yarn.lock to match package.json

philwinder
and
claude
committed
302dc17
fix(frontend): add submitTitle and children props to DeleteConfirmWindow

philwinder
and
claude
committed
cc6526d
fix(api/org/runtime/helix): require per-Worker repo on Ensure (red-then-green)

philwinder
and
claude
committed
30a23be
fix(api/server): surface agent runtime errors on the interaction (red-then-green)

philwinder
and
claude
committed
e142e30
feat(frontend): helix-org settings page with helix-integrated provider/model dropdowns

philwinder
and
claude
committed
8c92b9d
fix(api/org/runtime/helix): settings auto-apply to existing workers

philwinder
and
claude
committed
4f7837a
feat(api,frontend): streams list page + chart subscription edges

philwinder
and
claude
committed
a44324a
fix(frontend): stop mobile sidebar collapsing to zero height

philwinder
and
claude
committed
73a0ff2
Revert "fix(frontend): stop mobile sidebar collapsing to zero height"
philwinder
committed
53ddbb3
fix(api/server): serialize per-org helix-org bootstrap (red-then-green)

philwinder
and
claude
committed
6595b4b
fix(api/server): stop dropping org_* tables on every API restart

philwinder
and
claude
committed
47b8695
feat(helix-org): chat button opens the Human Desktop, not the bare agent

philwinder
and
claude
committed
62954ef
fix(frontend/helix-org): accept Delete key for edge severing on Linux/Windows

philwinder
and
claude
committed
38700f4
fix(api/org): wire PubSub through helix-org spawner config (red-then-green)

philwinder
and
claude
committed
510fbb3
fix(frontend/helix-org): anchor stream edges to subject + dedicated handle

philwinder
and
claude
committed
df73f8f
docs(helix-org/QA): shorten the QA plan to ~275 lines without losing coverage

philwinder
and
claude
committed
36eaefb
feat(helix-org/streams): chart stream-node click deep-links + scrolls

philwinder
and
claude
committed
02e45dd
feat(helix-org/streams): reinstate GitHub stream + reuse OAuth for auth

philwinder
and
claude
committed
07a1c84

Commits on Jun 4, 2026

feat(helix-org/streams): per-stream detail page with live SSE message tail

philwinder
and
claude
committed
24b05e3
docs(helix-org/QA): add §11 streams test plan (5 subsections + regressions)

philwinder
and
claude
committed
0462e77
feat(helix-org): Fire cascades activation stream + chart stream delete

philwinder
and
claude
committed
7621a2b
docs(helix-org/QA): add §11f stream deletion + Fire cascade test

philwinder
and
claude
committed
c77a6ad
feat(helix-org): launching spinner on chat button + open desktop in new tab

philwinder
and
claude
committed
f7136f4
fix(helix-org/streams): surface usable webhook URL + Copy button + loopback warning

philwinder
and
claude
committed
a40d892
refactor(helix-org): position-anchor subscriptions (worker→position pivot)

philwinder
and
claude
committed
7f3bc73
docs(helix-org/QA): add §11g position-anchored subscriptions

philwinder
and
claude
committed
aa9693a
feat(helix-org/streams): structured Repo + Events fields for github transport

philwinder
and
claude
committed
8bcb018
feat(helix-org/streams): one-click GitHub webhook setup + auto-install

philwinder
and
claude
committed
8560c3b
test(helix-org/streams): pin one-click webhook + wildcard + form decode

philwinder
and
claude
committed
ae46cfe
feat(helix-org): inject GH_TOKEN from org OAuth into worker sandbox

philwinder
and
claude
committed
9cc57fd
test(api/pkg/org/dispatch): pin event-on-activation-stream + DispatchHire auto-spawn paths

philwinder
and
claude
committed
035f71a
feat(helix-org/streams): request read:org in github OAuth scope set

philwinder
and
claude
committed
6931b39
refactor(helix-org): generic SpawnSecretInjector hook for transports

philwinder
and
claude
committed
192a206
feat(helix-org/tools): MCP tools to read + patch a Worker's helix project

philwinder
and
claude
committed
92c07c0
fix(sandbox/gh): don't invoke gh during docker build (root-owns .local)

philwinder
and
claude
committed
6984656
docs(helix-org/QA): pin §13 chat-with-worker E2E (Zed launch + gh + recovery)

philwinder
and
claude
committed
0810b22
docs(helix-org/QA): condense to UI-only, single-source-per-feature

philwinder
and
claude
committed
3ec1322
docs(org/qa): clarify activation streams are AI-only
philwinder
committed
9cc2082
refactor(org): PR review cleanup

philwinder
and
claude
committed
7175f18