mirror of
https://github.com/hanzo-apps/dataroom.git
synced 2026-10-30 14:47:36 +00:00
zeekay
98f0da7fa5
hanzo-build-linux-amd64 is the only ARC runner pool installed on hanzo-k8s today (arm64 pool is paused until DigitalOcean ships arm64 droplets, per ~/work/hanzo/.github/RUNNERS.md). The arm64 job was waiting on spark-hanzoai-arm64 — not provisioned in this cluster — so every build sat in queue forever and the amd64 leg got cancelled. Set platforms: linux/amd64 on the reusable build call to skip arm64 entirely. Re-add arm64 if/when DO ships arm64 droplets and the spark runner pool comes back online.
82 lines
1.7 KiB
TypeScript
82 lines
1.7 KiB
TypeScript
import prisma from "@/lib/prisma";
|
|
|
|
interface ValidateChatAccessOptions {
|
|
chatId: string;
|
|
userId?: string;
|
|
viewerId?: string;
|
|
}
|
|
|
|
/**
|
|
* Validate if a user or viewer has access to a chat
|
|
* @param options - Chat ID and user/viewer ID
|
|
* @returns Boolean indicating if access is granted
|
|
*/
|
|
export async function validateChatAccess({
|
|
chatId,
|
|
userId,
|
|
viewerId,
|
|
}: ValidateChatAccessOptions): Promise<boolean> {
|
|
try {
|
|
const chat = await prisma.chat.findUnique({
|
|
where: { id: chatId },
|
|
select: {
|
|
teamId: true,
|
|
userId: true,
|
|
viewerId: true,
|
|
},
|
|
});
|
|
|
|
if (!chat) {
|
|
return false;
|
|
}
|
|
|
|
// Internal user access
|
|
if (userId) {
|
|
// Check if user is member of the team
|
|
const userTeam = await prisma.userTeam.findUnique({
|
|
where: {
|
|
userId_teamId: {
|
|
userId,
|
|
teamId: chat.teamId,
|
|
},
|
|
},
|
|
});
|
|
|
|
if (!userTeam) {
|
|
return false;
|
|
}
|
|
|
|
// Additional check: if chat has a specific userId, it must match
|
|
if (chat.userId && chat.userId !== userId) {
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
// External viewer access
|
|
if (viewerId) {
|
|
// Check if viewer is associated with this chat
|
|
if (chat.viewerId !== viewerId) {
|
|
return false;
|
|
}
|
|
|
|
// Verify viewer exists and is associated with the team
|
|
const viewer = await prisma.viewer.findUnique({
|
|
where: { id: viewerId },
|
|
});
|
|
|
|
if (!viewer || viewer.teamId !== chat.teamId) {
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
return false;
|
|
} catch (error) {
|
|
console.error("Error validating chat access:", error);
|
|
return false;
|
|
}
|
|
}
|