Skip to content

phoenix-firewall v0.3.2

Choose a tag to compare

View all tags
@franksec42 franksec42 released this 30 Jun 17:16
v0.3.2
0a99cb5

What's fixed

Enrolled tenant_id now flows end-to-end — from agent.toml through to package-check evaluate payloads and heartbeats.

Root cause

Config had no TenantID field. tenant_id was written to agent.toml at enroll time but silently dropped on every subsequent startup — proxy, system, and heartbeat all ran without org context.

Changes

  • Config.TenantID field added; populated from PHOENIX_TENANT_ID env or agent.toml
  • New loadConfigWithAgentTOML() helper — fully back-fills all fields including tenant_id; used by both proxy and system commands
  • proxy mode now reads agent.toml (previously ignored it entirely)
  • Heartbeat reads cfg.TenantID first, env var as legacy fallback
  • Evaluate payload includes tenant_id so backend can apply org-scoped rules
  • WithTenantID() added to Client for clean composition

Upgrade

phoenix-firewall enroll --api-key <your-key>

--tenant-id is optional — the API key carries the org server-side.

Binaries

Platform File
macOS (Apple Silicon) phoenix-firewall-v0.3.2-darwin-arm64
Linux (amd64) phoenix-firewall-v0.3.2-linux-amd64
Assets 17
Loading