fix(session): propagate network context

src/auth/agentAuth.ts

@@ -11,6 +11,7 @@ export type AgentAuthContext = {
   role: string;
   isSuperuser: boolean;
   projectId: string;
+  network: string;
   projectRole: string;
   tokenExpiresAt?: string;
 };
@@ -22,6 +23,7 @@ type AgentAuthContextResponse = {
   role?: unknown;
   is_superuser?: unknown;
   project_id?: unknown;
+  network?: unknown;
   project_role?: unknown;
   token_expires_at?: unknown;
 };
@@ -53,6 +55,7 @@ const normalizeAgentAuthContext = (
     typeof payload.role !== "string" ||
     typeof payload.is_superuser !== "boolean" ||
     typeof payload.project_id !== "string" ||
+    typeof payload.network !== "string" ||
     typeof payload.project_role !== "string"
   ) {
     return null;
@@ -65,6 +68,7 @@ const normalizeAgentAuthContext = (
     role: payload.role,
     isSuperuser: payload.is_superuser,
     projectId: payload.project_id,
+    network: payload.network,
     projectRole: payload.project_role,
     tokenExpiresAt:
       typeof payload.token_expires_at === "string"

src/chat/sessionBridge.ts

@@ -17,6 +17,7 @@ export type SessionBinding = {
 export type SessionContext = {
   clientSessionId: string;
   accessToken?: string;
+  network?: string;
   projectId?: string;
   tokenExpiresAt?: string;
   userId?: string;
@@ -36,6 +37,7 @@ export class ChatSessionBridge {
   async resolve(context: {
     sessionId?: string;
     accessToken?: string;
+    network?: string;
     projectId?: string;
     traceId?: string;
     tokenExpiresAt?: string;
@@ -71,6 +73,7 @@ export class ChatSessionBridge {
       allowLearningWrite: true,
       clientSessionId: requestContext.clientSessionId,
       learningMode: "interactive",
+      network: requestContext.network,
       projectId: requestContext.projectId,
       projectKey: requestContext.projectKey,
       sessionId,
@@ -144,6 +147,7 @@ export class ChatSessionBridge {
   private buildRequestContext(context: {
     sessionId?: string;
     accessToken?: string;
+    network?: string;
     projectId?: string;
     traceId?: string;
     tokenExpiresAt?: string;
@@ -154,6 +158,7 @@ export class ChatSessionBridge {
       clientSessionId: sessionId || this.createClientSessionId(),
       accessToken: context.accessToken,
       actorKey: toActorKey(context.userId),
+      network: context.network,
       projectId: context.projectId,
       projectKey: toProjectKey(context.projectId),
       tokenExpiresAt: context.tokenExpiresAt,

src/routes/chat.ts

@@ -525,6 +525,7 @@ export const buildChatRouter = (
       const { binding, requestContext, created } = await sessionBridge.resolve({
         sessionId: requestedSessionId,
         accessToken,
+        network: authContext.network,
         projectId,
         traceId,
         tokenExpiresAt: authContext.tokenExpiresAt,

src/runtime/sessionContext.ts

@@ -9,6 +9,7 @@ export type RuntimeSessionContext = {
   clientSessionId: string;
   learningMode?: "interactive" | "review";
   memoryListReadScopes?: Partial<Record<"user" | "workspace", boolean>>;
+  network?: string;
   projectId?: string;
   projectKey: string;
   sessionId: string;

src/server.ts

@@ -101,11 +101,19 @@ app.post("/internal/tools/tjwater-cli-call", async (req, res) => {
   const timeoutSec =
     typeof req.body?.timeout === "number" && req.body.timeout > 0 ? req.body.timeout : 120;
 
+  if (!context.network) {
+    res.status(400).json({
+      message: "runtime network missing; refresh chat context",
+      detail: sessionId,
+    });
+    return;
+  }
+
   const authJson = JSON.stringify({
     server: config.TJWATER_API_BASE_URL,
     access_token: context.accessToken,
     project_id: context.projectId,
-    network:"tjwater",
+    network: context.network,
   });
 
   const cliArgs = ["--auth-stdin", ...command.split(/\s+/).filter(Boolean)];