neotoma has tenant isolation gap in relationship query endpoints

Summary The /listrelationships and /retrievegraphneighborhood endpoints call getAuthenticatedUserId confirming a valid session exists but do not pass the resolved user ID into the Supabase query as an .eq"userid", userId filter. As a result, queries return rows from all users rather than scoping ...

PT-2026-55846

Summary The /list relationships and /retrieve graph neighborhood endpoints call getAuthenticatedUserId confirming a valid session exists but do not pass the resolved user ID into the Supabase query as an .eq"user id", userId filter. As a result, queries return rows from all users rather than...