Threads org_id through every admin-facing service function (servers, keys, assignments, secrets, workflows/steps/runs, monitors, channels, audit), adds RequireRole middleware, and wires /api/org user + OIDC management routes. Agent/scheduler paths keep unique-key signatures and resolve org from the loaded record; internal-only helpers (getServerByID, getRunByID, getMonitorByID) preserve those call sites.