feat(server): derive org + agent from auth in create_conversation_session

[brentrager]

Problem

handle_create_session hard-coded organization_id = SEED_ORG_ID ("reference-org") and defaulted the agent id to a random UUID. That stub blocks multi-tenant chat: a relational host (SmooAI) has FKs requiring a real org + agent, so the session was being created under a bogus org with a random agent id. This was a known TODO in the handler (// A multi-tenant deployment derives this from auth.).

Solution

Derive the session's organization_id from the authenticated request, in priority order:

1. Widget policy org — AgentWidgetAuth gains a new optional organization_id field. Widget visitors authenticate via origin + authContext (not a JWT), so their org rides on the agent's embed policy. A host policy service (or WIDGET_AUTH_URL) supplies it.
2. JWT principal org — the connection's authenticated principal org_id is now threaded from the /ws handshake (resolve_ws_access → connection_loop → handle_frame → handle_create_session) instead of being dropped when the Principal is reduced to an AccessContext (which only carries user_id + groups).
3. Seed org — behavior-preserving fallback for the no-auth/local/dev flavor, so the in-memory + conformance + scenario flows are unchanged.

agent_id already came from the inbound agentId payload and is threaded onto the conversation/participants/session — unchanged.

The same JWT-org-then-configured-org derivation is applied to the lambda dispatch create-session path (resolve_frame_org, falling back to config.org_id).

Why widget-auth carries the org

AgentWidgetAuth previously only held allowed_origins + public_key — it did not carry the agent's org, and widget visitors don't present a JWT. Rather than force it, the change adds an additive, serde-default organization_id so a multi-tenant host can supply it; absent it, derivation falls through to the JWT principal, then the seed org.

Tests

New create_session_org_agent.rs:

• authed principal org X + payload agent Y → persisted conversation + both participants carry org X (not seed), agent participant internal_id = Y, session agent_id = Y.
• widget policy org takes precedence over the connection's JWT org.
• seed fallback — no auth org, no widget-policy org → conversation belongs to SEED_ORG_ID (behavior preserved).

Gates

• cargo build --manifest-path rust/Cargo.toml ✅
• cargo test -p smooai-smooth-operator-server ✅ (95 passed, incl. 3 new)
• cargo test -p smooai-smooth-operator -p smooai-smooth-operator-lambda ✅
• cargo fmt --check ✅
• cargo clippy -p smooai-smooth-operator-server / -lambda / smooth-operator -- -D warnings ✅ (No issues found)

🤖 Generated with Claude Code

[changeset-bot]

🦋 Changeset detected

Latest commit: 47866dc

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@smooai/smooth-operator	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR