fix: enforce active organization boundary

hub/src/feishu/slashCommands.ts

@@ -3,6 +3,7 @@ import type { FastifyBaseLogger } from "fastify";
 import { decimalToNumberOrNull, formatInteger, formatUsd } from "../agent/cost.js";
 import type { ModelRegistry, RoleEntry } from "../agent/models.js";
 import type { RuntimeSettings } from "../settings/runtime.js";
+import { lockActiveProjectOrganization } from "../org/status.js";
 import { sendText, type FeishuRuntime, type SendMessageOptions } from "./client.js";
 import type { TriggerQueue } from "./triggerQueue.js";
 
@@ -87,9 +88,12 @@ export function createSlashCommandRegistry(deps: SlashCommandRegistryDeps): Read
       "不会清空当前项目的等待队列。",
     ],
     run: async ({ projectId, chatId, rt, sendOptions }) => {
-      await deps.prisma.agentSession.updateMany({
-        where: { projectId, archivedAt: null },
-        data: { archivedAt: new Date() },
+      await deps.prisma.$transaction(async (tx) => {
+        await lockActiveProjectOrganization(tx, projectId);
+        await tx.agentSession.updateMany({
+          where: { projectId, archivedAt: null },
+          data: { archivedAt: new Date() },
+        });
       });
       await sendText(rt, chatId, "已开新会话,下次 @bot 将从头开始。", sendOptions);
     },
@@ -104,19 +108,24 @@ export function createSlashCommandRegistry(deps: SlashCommandRegistryDeps): Read
       "没有可恢复会话时只回复提示,不会创建 agent run。",
     ],
     run: async ({ projectId, chatId, rt, sendOptions }) => {
-      const latest = await deps.prisma.agentSession.findFirst({
-        where: { projectId, archivedAt: { not: null } },
-        orderBy: { archivedAt: "desc" },
-        select: { id: true },
+      const resumed = await deps.prisma.$transaction(async (tx) => {
+        await lockActiveProjectOrganization(tx, projectId);
+        const latest = await tx.agentSession.findFirst({
+          where: { projectId, archivedAt: { not: null } },
+          orderBy: { archivedAt: "desc" },
+          select: { id: true },
+        });
+        if (latest === null) return false;
+        await tx.agentSession.update({
+          where: { id: latest.id },
+          data: { archivedAt: null },
+        });
+        return true;
       });
-      if (latest === null) {
+      if (!resumed) {
         await sendText(rt, chatId, "没有可恢复的会话。", sendOptions);
         return;
       }
-      await deps.prisma.agentSession.update({
-        where: { id: latest.id },
-        data: { archivedAt: null },
-      });
       await sendText(rt, chatId, "已恢复上一个会话。", sendOptions);
     },
   });
@@ -175,9 +184,12 @@ export function createSlashCommandRegistry(deps: SlashCommandRegistryDeps): Read
       "清空当前项目已经排队、尚未开始的触发请求。",
     ],
     run: async ({ projectId, chatId, rt, sendOptions }) => {
-      await deps.prisma.agentSession.updateMany({
-        where: { projectId, archivedAt: null },
-        data: { archivedAt: new Date() },
+      await deps.prisma.$transaction(async (tx) => {
+        await lockActiveProjectOrganization(tx, projectId);
+        await tx.agentSession.updateMany({
+          where: { projectId, archivedAt: null },
+          data: { archivedAt: new Date() },
+        });
       });
       const cleared = deps.triggerQueue.clear(projectId);
       if (cleared > 0) {