Multi-tenant Buzz relay: community_id as a server-resolved key (comprehensive rewrite)#1321

Draft

tlongwell-block wants to merge 43 commits into

mainfrom

rewrite/relay-mt-comprehensive

Commits on Jun 27, 2026

feat(core): TenantContext + CommunityId — the server-resolved tenant fence

tlongwell-block
and
Eva
committed
feat(lane0): community_id-native schema + host normalization

tlongwell-block
and
Eva
committed
feat(lane0): fold review round 2 — FTS column, drop stale migrations

tlongwell-block
and
Eva
committed
fix(db): scope relay rows by community

tlongwell-block
and
Mari
committed
fix(db): require community scope for row lookups

tlongwell-block
and
Mari
committed
fix(db): add tenant-safe query defaults and reaper host provenance

tlongwell-block
and
Mari
committed
feat(auth): community-scope RateLimiter pubkey quotas

tlongwell-block
and
Sami
committed
feat(auth): NIP-98 replay seen-set — shared, community-scoped, atomic

tlongwell-block
and
Sami
committed
hardening(auth): TTL ceiling, key-case invariant, structured error tracing

tlongwell-block
and
Sami
committed
fence(auth): host-binding side door + access-checker community fence

tlongwell-block
and
Sami
committed
feat(pubsub): scope redis topics by community

tlongwell-block
and
Max
committed
test(pubsub): pin tenant-scoped topic refcounts

tlongwell-block
and
Max
committed
rewrite(search): Postgres FTS, community-scoped, drop Typesense

tlongwell-block
and
Quinn
committed
rewrite(search): ChannelScope enum closes ChannelLessOnly fence hole

tlongwell-block
and
Quinn
committed
feat(audit): per-community hash chain on the frozen audit_log DDL

tlongwell-block
and
Dawn
committed
feat(audit): widen NewAuditEntry.community_id to CommunityId

tlongwell-block
and
Dawn (sprout agent)
committed
feat(relay): row-zero host-binding seam (HostResolver + fail-closed bind)

tlongwell-block
and
Eva
committed
feat(relay): huddle-audio-unavailable guardrail under horizontal scaling (§5b)

tlongwell-block
and
Eva
committed
test(conformance): multi-tenant A/B isolation harness skeleton

tlongwell-block
and
Eva
committed
feat(relay): RelayInfo::build static-input fence (conformance NIP-11 row)

tlongwell-block
and
Eva
committed
fix(db): scope archived identities by community

tlongwell-block
and
Mari
committed
feat(relay): wire relay + admin call sites to community-scoped v3 API

tlongwell-block
and
Eva
committed
fix(db): add communities to schema snapshot

tlongwell-block
and
Mari
committed
fix(relay-mt): clear clippy -D warnings introduced by tenant threading

tlongwell-block
and
Eva
committed
fix(db): reconcile schema snapshot with mt migration

tlongwell-block
and
Mari
committed
test(e2e): seed localhost:3000 community for multi-tenant e2e suites

tlongwell-block
and
Eva
committed
test(e2e): converge e2e host on localhost + seed before relay boot

tlongwell-block
and
Eva
committed
test(e2e): seed community before relay boot in desktop e2e integration

tlongwell-block
and
Eva
committed
fix(relay): preserve relay URL port for deployment binding
npub1jh9wn95s0472h86ahapupaf7m6kx4v9sx2n0atj2hltcfer8k06s5n3pyf
committed
fix(relay): use deployment tenant binding for startup membership
npub1jh9wn95s0472h86ahapupaf7m6kx4v9sx2n0atj2hltcfer8k06s5n3pyf
committed
fix(relay): bind fanout to receiver community

npub1mprnacetjua2xx3p5eddmhxyk6wv929ymm5py8kd2xfxurxahspqqlgyta
and
Tyler Longwell
committed
perf(relay): add bus scaling harness

npub1mprnacetjua2xx3p5eddmhxyk6wv929ymm5py8kd2xfxurxahspqqlgyta
and
Tyler Longwell
committed
fix(relay): fail closed on empty/whitespace host in bind_community

committed
fix(relay): scope DM command writes by community

npub1jh9wn95s0472h86ahapupaf7m6kx4v9sx2n0atj2hltcfer8k06s5n3pyf
authored and
npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
committed
fix(relay): clear clippy on integrated multi-tenant stack

npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
and
Tyler Longwell
committed
feat(conformance): runtime trace schema + independent replay checker

npub1jmc9dt2lyvzu3h0kxlwxt5zg4fxp9476awyxw6gwxn72g6cw7exqs64whm
and
Tyler Longwell
committed
feat(relay): wire conformance emitter into ingest seam

npub1jmc9dt2lyvzu3h0kxlwxt5zg4fxp9476awyxw6gwxn72g6cw7exqs64whm
and
Tyler Longwell
committed
test(relay): EmitGuard coverage-breach self-test

npub1jmc9dt2lyvzu3h0kxlwxt5zg4fxp9476awyxw6gwxn72g6cw7exqs64whm
and
Tyler Longwell
committed
feat(relay): emit AuthCheck on REQ membership decision

npub1jmc9dt2lyvzu3h0kxlwxt5zg4fxp9476awyxw6gwxn72g6cw7exqs64whm
and
Tyler Longwell
committed
feat(relay): emit read-row trace steps with (B) projection

npub1jmc9dt2lyvzu3h0kxlwxt5zg4fxp9476awyxw6gwxn72g6cw7exqs64whm
and
Tyler Longwell
committed
fix(relay): share NIP-98 replay guard via Redis

authored and
npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
committed
test(buzz-db): pin communities_of_channels missing-channel-absent contract

authored and
npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
committed
test(relay): red-team Attack 3 — same-pod regression + fail-closed proof

authored and
npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
committed