Mobile: create and select TOB cloud organizations with owner/member boundaries (T1)

Refs BotHarness/tob#2. Continue the T1 vertical slice after #2103: create a cloud organization in the mobile app, read and select the same organization through the independent TOB CLI, and prove owner/member/no-membership boundaries in UAT.

Reuse trusted instance configuration, independent WorkOS sessions, and existing cloud client; no Host required.
WorkOS is the membership authority; D1 maps this instance's organizations; Org DO owns settings. Instance administrator admission does not grant organization access.
Create/list/select and one bounded owner-only settings update have CLI/API parity. No member invitation/role editor or T2 channels.
Preserve idempotent retries, selected organization token binding, refresh/restart behavior, clear errors and drafts.
Source tests + UAT public API/CLI + assigned Simulator screenshots/video. Physical phone/Android/Human QA remain separate.
Stack on Mobile: trusted TOB UAT import and WorkOS sessions #2103 until it is merged by the Human. UAT only; no Prod or merge authorization.

Merge outcome — 2026-10-18

Human authorized merge and closure of completed slices. PR #2121 was integrated with its original commits through #2157 into main. This issue’s bounded implementation and recorded UAT path are complete. Source, Simulator, real UAT and historical Human-assisted browser evidence retain their published boundaries; no new physical-device/Android/Human acceptance is implied. Broader identity-event revocation, WebSocket, org-wide Agents and T1–T5 acceptance remain in BotHarness/tob#1 and its child tasks. No Prod deployment or release.

Agent task codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9: completed for this bounded slice.

Agent work claim

Agent: Codex
Task: codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9 (not a DSH Session)
Issue scope: mobile organization creation → independent TOB CLI list/select → live owner/member/no-membership checks; WorkOS/D1/Org DO recovery and scoped tokens. UAT only, no merge/Prod/T2.
Branches: TOB codex/t1-organizations; DeepSeekBot codex/2120-cloud-organizations (stacked on Mobile: trusted TOB UAT import and WorkOS sessions #2103).
Started: 2026-10-18 UTC
State: active

fix(mobile): bind workspace draft to selected version

test(mobile): satisfy strict organization result indexing

docs: document cloud organization acceptance and resolve ADR number

fix(mobile): retain pending organization creation on identical import

fix(mobile): discard stale organization draft on reselection

docs: publish UAT mobile organization acceptance

T1 organization tracer bullet is ready for review; no merge, Prod or T2 release.

Runtime: mobile create/save 494a20f1e; final role/reselection/restart/logout 1b39324c5; UAT Worker e5bc562. Current PR heads add evidence/tests/docs only.
PASS: actual phone creates one organization and saves as owner; independent formal CLI lists/selects/reads the same ID/content/version. Member downgrade rejects stale-owner writes from both clients (403), original version remains 2. Role restored active owner and read back. Cold restart revalidates selected organization; phone logout revokes only its own session, latest refresh rejected, CLI remains admitted.
Native finding fixed: member reselect showed an unsaved draft and stale list role. Corrected at 1b39324c5 and repeated in the final video. API-prepared login is separate from the earlier real Hosted AuthKit proof.
Tests: 20 workerd + 19 Node/CLI + 2 wizard; 28 focused mobile checks/typecheck. Final product-code CI passed. Latest exact-head CI also passed: mobile 9de7c560e (run), service abc898f (run). Normal Simulator signing resolved the initial Keychain build failure without erasing data.
Inspected screenshots, two videos and exact limits. All five images embedded in the PR were confirmed loaded at 402×874. Service/CLI Draft #17 · Mobile Draft #2121.
Automatic approval rejected optional second-org creation and real membership deactivation; neither executed. Two-org switching and inactive-member UAT remain unverified. Local failure tests are not cloud-fault proof.
Remaining T1: signed identity events/reconciliation/revocation, deployment/config interruption recovery, remaining physical/platform/native failure acceptance, review and Human QA. Simulator/8091 released; original Hosts/phone untouched; test credentials removed after revocation. One UAT test organization retained, active owner restored; registration/Magic Auth remain closed.

Task codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9: this bounded implementation and acceptance claim is handed off for Human review. Private reconstruction data remains local; no secrets or personal identity in this report. The local architecture HTML is a supplemental review aid, not shared runtime evidence.

Agent work outcome: completed for this bounded UAT slice. Human authorized merge; original commits are integrated through #2157. See the updated issue for exact evidence and remaining parent-task/platform gates. No Prod deployment. Task: codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9.

feat(mobile): create and select cloud organizations

Merge current main into T1 organization slice

Navigation Menu

Repository navigation

Mobile: create and select TOB cloud organizations with owner/member boundaries (T1) #2120

Merge outcome — 2026-10-18

Agent work claim

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Mobile: create and select TOB cloud organizations with owner/member boundaries (T1) #2120

Description

Merge outcome — 2026-10-18

Activity

DoodleBears commented on Oct 17, 2026

Agent work claim

DoodleBears commented on Oct 17, 2026

DoodleBears commented on Oct 18, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions