WeKnora deployment source with the reviewed wiki identity, summary and recovery fixes

internal/handler/dto/tenant.go

@@ -0,0 +1,91 @@
+package dto
+
+import (
+	"context"
+	"time"
+
+	"github.com/Tencent/WeKnora/internal/types"
+	"gorm.io/gorm"
+)
+
+// TenantResponse is the viewer-safe tenant profile shape. Secret-bearing
+// columns are omitted or redacted unless the caller has Admin+.
+type TenantResponse struct {
+	ID                  uint64                     `json:"id"`
+	Name                string                     `json:"name"`
+	Description         string                     `json:"description"`
+	Status              string                     `json:"status"`
+	RetrieverEngines    types.RetrieverEngines     `json:"retriever_engines"`
+	Business            string                     `json:"business"`
+	StorageQuota        int64                      `json:"storage_quota"`
+	StorageUsed         int64                      `json:"storage_used"`
+	ContextConfig       *types.ContextConfig       `json:"context_config,omitempty"`
+	WebSearchConfig     *types.WebSearchConfig     `json:"web_search_config,omitempty"`
+	ParserEngineConfig  *types.ParserEngineConfig  `json:"parser_engine_config,omitempty"`
+	Credentials         *types.CredentialsConfig   `json:"credentials,omitempty"`
+	StorageEngineConfig *types.StorageEngineConfig `json:"storage_engine_config,omitempty"`
+	ChatHistoryConfig   *types.ChatHistoryConfig   `json:"chat_history_config,omitempty"`
+	RetrievalConfig     *types.RetrievalConfig     `json:"retrieval_config,omitempty"`
+	MemoryConfig        *types.MemoryConfig        `json:"memory_config,omitempty"`
+	CreatedAt           time.Time                  `json:"created_at"`
+	UpdatedAt           time.Time                  `json:"updated_at"`
+	DeletedAt           gorm.DeletedAt             `json:"deleted_at"`
+}
+
+// NewTenantResponse converts a stored tenant into its HTTP response shape.
+func NewTenantResponse(ctx context.Context, tenant *types.Tenant) *TenantResponse {
+	return NewTenantResponseWithRole(tenant, RoleFromContext(ctx))
+}
+
+// NewTenantResponseWithRole converts a stored tenant using an explicit role
+// (for auth flows where tenant role is not yet in request context).
+func NewTenantResponseWithRole(tenant *types.Tenant, role types.TenantRole) *TenantResponse {
+	if tenant == nil {
+		return nil
+	}
+	includeSecrets := role.HasPermission(types.TenantRoleAdmin)
+	resp := &TenantResponse{
+		ID:                tenant.ID,
+		Name:              tenant.Name,
+		Description:       tenant.Description,
+		Status:            tenant.Status,
+		RetrieverEngines:  tenant.RetrieverEngines,
+		Business:          tenant.Business,
+		StorageQuota:      tenant.StorageQuota,
+		StorageUsed:       tenant.StorageUsed,
+		ContextConfig:     tenant.ContextConfig,
+		ChatHistoryConfig: tenant.ChatHistoryConfig,
+		RetrievalConfig:   tenant.RetrievalConfig,
+		MemoryConfig:      tenant.MemoryConfig,
+		CreatedAt:         tenant.CreatedAt,
+		UpdatedAt:         tenant.UpdatedAt,
+		DeletedAt:         tenant.DeletedAt,
+	}
+	if includeSecrets {
+		resp.WebSearchConfig = types.WebSearchConfigForResponse(tenant.WebSearchConfig, true)
+		resp.ParserEngineConfig = types.ParserEngineConfigForResponse(tenant.ParserEngineConfig, true)
+		resp.Credentials = types.CredentialsConfigForResponse(tenant.Credentials, true)
+		resp.StorageEngineConfig = types.StorageEngineConfigForResponse(tenant.StorageEngineConfig, true)
+	}
+	return resp
+}
+
+// NewTenantResponses is the slice convenience wrapper.
+func NewTenantResponses(ctx context.Context, tenants []*types.Tenant) []*TenantResponse {
+	out := make([]*TenantResponse, 0, len(tenants))
+	for _, t := range tenants {
+		out = append(out, NewTenantResponse(ctx, t))
+	}
+	return out
+}
+
+// NewTenantResponsesCrossTenant redacts every tenant as Viewer regardless of
+// the caller's active-tenant role. Used by cross-tenant list/search endpoints
+// where the caller's home-tenant role must not unlock other tenants' secrets.
+func NewTenantResponsesCrossTenant(tenants []*types.Tenant) []*TenantResponse {
+	out := make([]*TenantResponse, 0, len(tenants))
+	for _, t := range tenants {
+		out = append(out, NewTenantResponseWithRole(t, types.TenantRoleViewer))
+	}
+	return out
+}