app/lib/people.server.ts

Functions

Imports

It imports app/db/schema.ts, app/lib/agent-keys.server.ts, app/lib/roles.ts. Imported by app/lib/ai.server.ts, app/lib/binder.server.ts, app/lib/books.server.ts, app/lib/bulk.server.ts, app/lib/content.server.ts, app/lib/context.ts, app/lib/google/drive.server.ts, app/lib/google/oauth.server.ts, app/lib/legal.server.ts, app/lib/mcp/door.ts, app/lib/mcp/tools.ts, app/lib/media.server.ts, app/lib/mentions.server.ts, app/lib/people-admin.server.ts, app/lib/projects.server.ts, app/lib/social/queue.server.ts, app/lib/waiting.server.ts, app/lib/writing.server.ts, app/routes/frame.tsx, app/routes/home.tsx, app/routes/social.tsx, workers/gate.ts.

Source

1import { and, asc, eq, isNull } from "drizzle-orm";
2import { drizzle } from "drizzle-orm/d1";
3
4import { people, projectMembers, projects } from "~/db/schema";
5import { agentEmail } from "~/lib/agent-keys.server";
6import { can, type Action, type Role } from "~/lib/roles";
7
8export type Viewer = {
9  id: number;
10  email: string;
11  name: string;
12  isOwner: boolean;
13  /** Another company's AI agent that reads and flags through MCP (design B6). Never writes or publishes. */
14  isReviewer: boolean;
15};
16
17export type VisibleProject = {
18  id: number;
19  slug: string;
20  name: string;
21  role: Role;
22  /** A site's projects open at /p/, a book's at /b/. A project that is neither has no view yet. */
23  kind: "site" | "book" | null;
24};
25
26function kindOf(row: { site: string | null; book: string | null }): VisibleProject["kind"] {
27  return row.site ? "site" : row.book ? "book" : null;
28}
29
30/** The active person with this email, or null. Email matching is case-insensitive, as the column is. */
31export async function findViewer(db: D1Database, email: string): Promise<Viewer | null> {
32  const row = await drizzle(db)
33    .select({ id: people.id, email: people.email, name: people.name, isOwner: people.isOwner, isReviewer: people.isReviewer })
34    .from(people)
35    .where(and(eq(people.email, email.trim()), isNull(people.disabledAt)))
36    .get();
37  return row ?? null;
38}
39
40/**
41 * The active person row for a named agent key ("agent:<name>"), or null. The row is where the agent's
42 * role lives: the key proves who is knocking and grants nothing. An agent is never the Owner, so a row
43 * flagged Owner is refused here, whatever the table says.
44 */
45export async function findAgentViewer(db: D1Database, name: string): Promise<Viewer | null> {
46  const viewer = await findViewer(db, agentEmail(name));
47  return viewer && !viewer.isOwner ? viewer : null;
48}
49
50async function roleOn(db: D1Database, viewer: Viewer, projectId: number): Promise<Role | null> {
51  if (viewer.isOwner) return "owner";
52  const row = await drizzle(db)
53    .select({ role: projectMembers.role })
54    .from(projectMembers)
55    .where(and(eq(projectMembers.projectId, projectId), eq(projectMembers.personId, viewer.id)))
56    .get();
57  return row?.role ?? null;
58}
59
60/** Every project the viewer may read: all of them for the Owner, shared ones for everyone else. */
61export async function visibleProjects(db: D1Database, viewer: Viewer): Promise<VisibleProject[]> {
62  const d = drizzle(db);
63  if (viewer.isOwner) {
64    const rows = await d
65      .select({ id: projects.id, slug: projects.slug, name: projects.name, site: projects.site, book: projects.book })
66      .from(projects)
67      .orderBy(asc(projects.name))
68      .all();
69    return rows.map(({ site, book, ...r }) => ({ ...r, role: "owner" as const, kind: kindOf({ site, book }) }));
70  }
71  const rows = await d
72    .select({ id: projects.id, slug: projects.slug, name: projects.name, role: projectMembers.role, site: projects.site, book: projects.book })
73    .from(projectMembers)
74    .innerJoin(projects, eq(projects.id, projectMembers.projectId))
75    .where(eq(projectMembers.personId, viewer.id))
76    .orderBy(asc(projects.name))
77    .all();
78  return rows.map(({ site, book, ...r }) => ({ ...r, kind: kindOf({ site, book }) }));
79}
80
81/**
82 * Throws a 404 when the viewer has no role on the project, so a project that is not shared with
83 * someone is indistinguishable from one that does not exist, and a 403 when the role is too low.
84 */
85export async function requireAction(
86  db: D1Database,
87  viewer: Viewer,
88  projectId: number,
89  action: Action,
90): Promise<Role> {
91  const role = await roleOn(db, viewer, projectId);
92  if (role === null) throw new Response("Not found", { status: 404 });
93  if (!can(role, action)) throw new Response("Forbidden", { status: 403 });
94  return role;
95}