fix(objectql, plugin-auth)!: organization delete refuses while records remain, removes its own auth structure as one unit, and never orphans a tenant column by objectstack-fleet[bot] · Pull Request #25016 · objectstack-ai/objectstack

test(plugin-auth): the organization-delete engine double routes delete through assertEngineDeleteDispatch and honours limit; pin it in the double ledger

claude

committed

676a8b8

test(plugin-auth): the organization-delete double's WHERE matcher refuses combinators it does not implement

claude

committed

d1c373c

Merge remote-tracking branch 'origin/main' into claude/issue-24948-org-delete-refuse-nonempty

claude

committed

b753881

fix(objectql, plugin-auth): append-only ledgers neither refuse an organization delete nor lose their rows

claude

committed

0573a96

wip: organization delete review round (B1 B2 B4 B5 B9)

claude

committed

3889a6f

wip: review round (B3 B6 B8 and the dogfood pins)

claude

committed

dbc61ef

fix(plugin-auth): the Default Organization's last-administrator question is asked before better-auth deletes any member, judged with the members that leave with it

claude

committed

6635c3c

test(plugin-auth): drop an unused binding in the Default Organization guard pin

claude

committed

c1dd702

fix(objectql): the organization refusal's disclosure count asks the caller's own count, with no isSystem shortcut

claude

committed

ba33df8

test(plugin-auth): type the member scan's query options in the #24948 judge pins

claude

committed

979fb8a

Merge remote-tracking branch 'origin/main' into claude/issue-24948-org-delete-refuse-nonempty

claude

committed

20f8395

fix(objectql, plugin-auth): engine-owned rows outlive the organization, like the ledgers (#24948)

claude

committed

e184b51

fix(objectql, plugin-auth): the Default Organization's delete is counted before the first write (#24948)

claude

committed

e40aea8

test(dogfood): pin that a failed Default Organization lookup never reaches better-auth's first write (#24948)

claude

committed

139abc4

Navigation Menu

Repository navigation

fix(objectql, plugin-auth)!: organization delete refuses while records remain, removes its own auth structure as one unit, and never orphans a tenant column - #25016

fix(objectql, plugin-auth)!: organization delete refuses while records remain, removes its own auth structure as one unit, and never orphans a tenant column#25016
objectstack-fleet[bot] merged 20 commits into
mainfrom
claude/issue-24948-org-delete-refuse-nonempty

Commits on Oct 20, 2026

wip(objectql,plugin-auth): organization delete refuses while records remain

wip: dogfood pins, org-admin grants removed with the organization, posture-aware Default Organization reading

wip: changeset

wip: federated-reader census rows for the organization-delete count

fix(plugin-auth): spell the organization-delete refusal code at its throw site, and read the engine options without casts

docs(permissions): regenerate the tenant-audit census for the three organization-delete write sites

Commits on Oct 21, 2026

test(plugin-auth): the organization-delete engine double routes delete through assertEngineDeleteDispatch and honours limit; pin it in the double ledger

test(plugin-auth): the organization-delete double's WHERE matcher refuses combinators it does not implement

Merge remote-tracking branch 'origin/main' into claude/issue-24948-org-delete-refuse-nonempty

fix(objectql, plugin-auth): append-only ledgers neither refuse an organization delete nor lose their rows

wip: organization delete review round (B1 B2 B4 B5 B9)

wip: review round (B3 B6 B8 and the dogfood pins)

fix(plugin-auth): the Default Organization's last-administrator question is asked before better-auth deletes any member, judged with the members that leave with it

test(plugin-auth): drop an unused binding in the Default Organization guard pin

fix(objectql): the organization refusal's disclosure count asks the caller's own count, with no isSystem shortcut

test(plugin-auth): type the member scan's query options in the #24948 judge pins

Merge remote-tracking branch 'origin/main' into claude/issue-24948-org-delete-refuse-nonempty

fix(objectql, plugin-auth): engine-owned rows outlive the organization, like the ledgers (#24948)

fix(objectql, plugin-auth): the Default Organization's delete is counted before the first write (#24948)

test(dogfood): pin that a failed Default Organization lookup never reaches better-auth's first write (#24948)