WeKnora deployment source with the reviewed wiki identity, summary and recovery fixes

internal/im/personal_channel_access.go

@@ -0,0 +1,36 @@
+package im
+
+import (
+	"context"
+
+	"github.com/Tencent/WeKnora/internal/types"
+	"gorm.io/gorm"
+)
+
+// A digital human's default Agent carries its creator's personal connections.
+// Tenant administrator privileges do not transfer that personal ownership.
+func (s *Service) CheckPersonalChannelAgentAccess(ctx context.Context, agentID string, tenantID uint64) error {
+	var human types.DigitalHuman
+	err := s.db.WithContext(ctx).Select("id", "owner_id").Where("primary_agent_id = ? AND tenant_id = ?", agentID, tenantID).First(&human).Error
+	if err == gorm.ErrRecordNotFound {
+		return nil
+	}
+	if err != nil {
+		return err
+	}
+	userID, hasUser := types.UserIDFromContext(ctx)
+	if !hasUser || types.IsSyntheticUserID(userID) || userID != human.OwnerID {
+		return gorm.ErrRecordNotFound
+	}
+	return nil
+}
+
+func excludeOtherPersonalChannels(query *gorm.DB, ctx context.Context) *gorm.DB {
+	userID, hasUser := types.UserIDFromContext(ctx)
+	if !hasUser || types.IsSyntheticUserID(userID) {
+		userID = ""
+	}
+	return query.Where(`NOT EXISTS (SELECT 1 FROM digital_humans AS dh
+		WHERE dh.primary_agent_id = c.agent_id AND dh.tenant_id = c.tenant_id
+		AND dh.deleted_at IS NULL AND dh.owner_id <> ?)`, userID)
+}