WeKnora deployment source with the reviewed wiki identity, summary and recovery fixes

internal/handler/session/resource_binding.go

@@ -0,0 +1,40 @@
+package session
+
+import (
+	"context"
+	"fmt"
+
+	"github.com/Tencent/WeKnora/internal/types"
+)
+
+// Only call with the server-saved uploads or owned temporary documents prepared
+// by prepareQARequest. Text and client-supplied URLs are not ownership evidence.
+func (h *Handler) bindUploadedMessageResources(ctx context.Context, message *types.Message) error {
+	if h.resourceCatalog == nil || message == nil {
+		return nil
+	}
+	tenantID, _ := types.TenantIDFromContext(ctx)
+	refs := make(map[string]struct{})
+	for _, image := range message.Images {
+		refs[image.URL] = struct{}{}
+	}
+	for _, attachment := range message.Attachments {
+		refs[attachment.URL] = struct{}{}
+	}
+	for ref := range refs {
+		if _, ok := types.ParseResourcePath(ref); !ok {
+			continue
+		}
+		resource, err := h.resourceCatalog.Resolve(ctx, ref)
+		if err != nil {
+			return err
+		}
+		if resource == nil || resource.TenantID != tenantID || message.ID == "" {
+			return fmt.Errorf("invalid uploaded message resource")
+		}
+		if err := h.resourceCatalog.Bind(ctx, ref, types.ResourceOwnerMessage, message.ID, types.ResourceRelationAttachment); err != nil {
+			return err
+		}
+	}
+	return nil
+}