9ede795c5b
Enforce workspace isolation at every layer: - Router: move RequireWorkspaceMember middleware to group level so ALL workspace-scoped routes (issues, agents, skills, runtimes, inbox, comments) require workspace context - SQL: add GetXxxInWorkspace queries that filter by workspace_id, eliminating cross-workspace data access at the query level - Handlers: loadXForUser functions use workspace-scoped queries, no fallback to unscoped queries - Migration 025: add workspace_id column to comment table with backfill - ListComments: add workspace_id filter for defense-in-depth Fix daemon workspace mapping: - Server returns workspace_id in task claim response (from issue) - Daemon uses task.WorkspaceID directly instead of unreliable workspaceIDForRuntime() local map lookup - Remove workspaceIDForRuntime function Fix agent/human parity: - Comment update/delete: use resolveActor for isAuthor check so agents can edit/delete their own comments - Event attribution: replace hardcoded "member" with resolveActor in agent, skill, and subscriber publish calls Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
84 lines
2 KiB
SQL
84 lines
2 KiB
SQL
-- Skill CRUD
|
|
|
|
-- name: ListSkillsByWorkspace :many
|
|
SELECT * FROM skill
|
|
WHERE workspace_id = $1
|
|
ORDER BY name ASC;
|
|
|
|
-- name: GetSkill :one
|
|
SELECT * FROM skill
|
|
WHERE id = $1;
|
|
|
|
-- name: GetSkillInWorkspace :one
|
|
SELECT * FROM skill
|
|
WHERE id = $1 AND workspace_id = $2;
|
|
|
|
-- name: CreateSkill :one
|
|
INSERT INTO skill (workspace_id, name, description, content, config, created_by)
|
|
VALUES ($1, $2, $3, $4, $5, $6)
|
|
RETURNING *;
|
|
|
|
-- name: UpdateSkill :one
|
|
UPDATE skill SET
|
|
name = COALESCE(sqlc.narg('name'), name),
|
|
description = COALESCE(sqlc.narg('description'), description),
|
|
content = COALESCE(sqlc.narg('content'), content),
|
|
config = COALESCE(sqlc.narg('config'), config),
|
|
updated_at = now()
|
|
WHERE id = $1
|
|
RETURNING *;
|
|
|
|
-- name: DeleteSkill :exec
|
|
DELETE FROM skill WHERE id = $1;
|
|
|
|
-- Skill File CRUD
|
|
|
|
-- name: ListSkillFiles :many
|
|
SELECT * FROM skill_file
|
|
WHERE skill_id = $1
|
|
ORDER BY path ASC;
|
|
|
|
-- name: GetSkillFile :one
|
|
SELECT * FROM skill_file
|
|
WHERE id = $1;
|
|
|
|
-- name: UpsertSkillFile :one
|
|
INSERT INTO skill_file (skill_id, path, content)
|
|
VALUES ($1, $2, $3)
|
|
ON CONFLICT (skill_id, path) DO UPDATE SET
|
|
content = EXCLUDED.content,
|
|
updated_at = now()
|
|
RETURNING *;
|
|
|
|
-- name: DeleteSkillFile :exec
|
|
DELETE FROM skill_file WHERE id = $1;
|
|
|
|
-- name: DeleteSkillFilesBySkill :exec
|
|
DELETE FROM skill_file WHERE skill_id = $1;
|
|
|
|
-- Agent-Skill junction
|
|
|
|
-- name: ListAgentSkills :many
|
|
SELECT s.* FROM skill s
|
|
JOIN agent_skill ask ON ask.skill_id = s.id
|
|
WHERE ask.agent_id = $1
|
|
ORDER BY s.name ASC;
|
|
|
|
-- name: AddAgentSkill :exec
|
|
INSERT INTO agent_skill (agent_id, skill_id)
|
|
VALUES ($1, $2)
|
|
ON CONFLICT DO NOTHING;
|
|
|
|
-- name: RemoveAgentSkill :exec
|
|
DELETE FROM agent_skill
|
|
WHERE agent_id = $1 AND skill_id = $2;
|
|
|
|
-- name: RemoveAllAgentSkills :exec
|
|
DELETE FROM agent_skill WHERE agent_id = $1;
|
|
|
|
-- name: ListAgentSkillsByWorkspace :many
|
|
SELECT ask.agent_id, s.id, s.name, s.description
|
|
FROM agent_skill ask
|
|
JOIN skill s ON s.id = ask.skill_id
|
|
WHERE s.workspace_id = $1
|
|
ORDER BY s.name ASC;
|