Write Tenant-Isolated Queries

Transforms database queries to include tenantId in partition keys for tenant isolation.

Core Principle

ALL database queries MUST include tenantId in the partition key.

Use tenantId only; there is no organization. Do not use or filter by organizationId in queries—partition key and WHERE clauses use tenantId only.

Reference: .cursorrules (Security Requirements), ModuleImplementationGuide.md Section 8

Query Patterns

✅ Correct Pattern

import { getDatabaseClient } from '@coder/shared';
import { loadConfig } from '../config';