fix(desktop): workspace scoping + returning-user org recovery + signal drill-down

[Bennettxai]

Problem

In the desktop shell, the data modules (nodes, graph, timeline, heatmap, activity) rendered empty for a real workspace, and returning users saw every module empty. The signal drill-down also errored with "signal not found."

Root causes (all: the active scope was dropped before reaching the engine)

1. Org id used as tenant id. bootstrap()/refreshWorkspaces() called listWorkspaces(orgId), but that arg is tenant. Selecting a real org (operatoros) sent ?tenant=operatoros, matched zero workspaces, and blanked the UI.

2. Graph + node files unscoped. loadGraph() and getNodeFiles() hit /api/workspace, /api/optimal/graph, /api/optimal/nodes/:slug/files with no workspace param, always reading the empty default workspace. Node slugs are not globally unique, so scope is mandatory.

3. Returning users stuck on the compat default org. Before organizations were first-class, the app auto-selected and persisted the default org. Fix fix(desktop): workspace scoping + returning-user org recovery + signal drill-down #1's re-selection only triggered when the saved org was invalid; default is valid, so returning users stayed parked on the empty compatibility org and saw every module empty. This was the reported "nothing works."

4. Signal drill-down 404. /api/signals/:id is keyed by the context id and workspace-scoped, but the node-files payload dropped the id it already SELECTs (the UI parsed the filename instead, which never matches) and getSignal() omitted the workspace.

Fix

• listWorkspaces() takes an options object and filters by ?organization; added organization_id to the Workspace type.
• bootstrap() prefers a real organization, and now also upgrades away from the empty default org when a real one exists, so returning users self-heal on next load.
• loadGraph(workspace) and getNodeFiles(slug, workspace) thread the active workspace through every /api/workspace and /api/optimal/* call; the /graph route remounts on workspace switch.
• optimal_node_files now returns each signal's id; getSignal(id, workspace) passes the scope; the Nodes page drills in with the real id.

Verification (live engine on :4200)

• svelte-check: 0 errors (4 pre-existing warnings). Engine mix compile: clean.
• Restoring the old default/default localStorage state now recovers to OperatorOS + a populated workspace and renders the node tree.
• /graph renders 262 nodes / 420 edges for a populated workspace (was 0).
• All 5 workspaces populate nodes, graph, activity/timeline/heatmap, and search.
• Note: the running engine release must be rebuilt for the node-files id (fix #4) to appear; the change compiles and the /api/signals/:id?workspace= contract is verified manually.

Out of scope / follow-ups

• memory and wiki are empty by data-state (no promoted facts, no curated wiki pages), not a bug.
• +layout.svelte createWorkspace({ tenant: $activeOrgId }) has the same org-vs-tenant mixup on the write path and no organization field. Left for a separate pass.

🤖 Generated with Claude Code