feat(access): add guest chat ACL (#235)

db/queries/conversations.sql

@@ -44,10 +44,9 @@ SELECT
   b.created_at,
   b.updated_at
 FROM bots b
-LEFT JOIN bot_members bm ON bm.bot_id = b.id AND bm.user_id = sqlc.arg(user_id)
 LEFT JOIN models chat_models ON chat_models.id = b.chat_model_id
 WHERE b.id = sqlc.arg(bot_id)
-  AND (b.owner_user_id = sqlc.arg(user_id) OR bm.user_id IS NOT NULL)
+  AND b.owner_user_id = sqlc.arg(user_id)
 ORDER BY b.updated_at DESC;
 
 -- name: ListVisibleChatsByBotAndUser :many
@@ -69,24 +68,19 @@ SELECT
   END)::text AS participant_role,
   NULL::timestamptz AS last_observed_at
 FROM bots b
-LEFT JOIN bot_members bm ON bm.bot_id = b.id AND bm.user_id = sqlc.arg(user_id)
 LEFT JOIN models chat_models ON chat_models.id = b.chat_model_id
 WHERE b.id = sqlc.arg(bot_id)
-  AND (b.owner_user_id = sqlc.arg(user_id) OR bm.user_id IS NOT NULL)
+  AND b.owner_user_id = sqlc.arg(user_id)
 ORDER BY b.updated_at DESC;
 
 -- name: GetChatReadAccessByUser :one
 SELECT
   'participant'::text AS access_mode,
-  (CASE
-    WHEN b.owner_user_id = sqlc.arg(user_id) THEN 'owner'
-    ELSE COALESCE(bm.role, ''::text)
-  END)::text AS participant_role,
+  'owner'::text AS participant_role,
   NULL::timestamptz AS last_observed_at
 FROM bots b
-LEFT JOIN bot_members bm ON bm.bot_id = b.id AND bm.user_id = sqlc.arg(user_id)
 WHERE b.id = sqlc.arg(chat_id)
-  AND (b.owner_user_id = sqlc.arg(user_id) OR bm.user_id IS NOT NULL)
+  AND b.owner_user_id = sqlc.arg(user_id)
 LIMIT 1;
 
 -- name: ListThreadsByParent :many
@@ -141,66 +135,26 @@ WITH deleted_messages AS (
 DELETE FROM bot_channel_routes bcr
 WHERE bcr.bot_id = sqlc.arg(chat_id);
 
--- chat_participants
-
--- name: AddChatParticipant :one
-INSERT INTO bot_members (bot_id, user_id, role)
-VALUES (sqlc.arg(chat_id), sqlc.arg(user_id), sqlc.arg(role))
-ON CONFLICT (bot_id, user_id) DO UPDATE SET role = EXCLUDED.role
-RETURNING bot_id AS chat_id, user_id, role, created_at AS joined_at;
-
 -- name: GetChatParticipant :one
-WITH owner_participant AS (
-  SELECT b.id AS chat_id, b.owner_user_id AS user_id, 'owner'::text AS role, b.created_at AS joined_at
-  FROM bots b
-  WHERE b.id = sqlc.arg(chat_id) AND b.owner_user_id = sqlc.arg(user_id)
-),
-member_participant AS (
-  SELECT bm.bot_id AS chat_id, bm.user_id, bm.role, bm.created_at AS joined_at
-  FROM bot_members bm
-  WHERE bm.bot_id = sqlc.arg(chat_id) AND bm.user_id = sqlc.arg(user_id)
-)
-SELECT chat_id, user_id, role, joined_at
-FROM (
-  SELECT * FROM owner_participant
-  UNION ALL
-  SELECT * FROM member_participant
-) p
-ORDER BY CASE WHEN role = 'owner' THEN 0 ELSE 1 END
+SELECT b.id AS chat_id, b.owner_user_id AS user_id, 'owner'::text AS role, b.created_at AS joined_at
+FROM bots b
+WHERE b.id = sqlc.arg(chat_id) AND b.owner_user_id = sqlc.arg(user_id)
 LIMIT 1;
 
 -- name: ListChatParticipants :many
-WITH owner_participant AS (
-  SELECT b.id AS chat_id, b.owner_user_id AS user_id, 'owner'::text AS role, b.created_at AS joined_at
-  FROM bots b
-  WHERE b.id = sqlc.arg(chat_id)
-),
-member_participant AS (
-  SELECT bm.bot_id AS chat_id, bm.user_id, bm.role, bm.created_at AS joined_at
-  FROM bot_members bm
-  WHERE bm.bot_id = sqlc.arg(chat_id)
-    AND bm.user_id <> (SELECT owner_user_id FROM bots WHERE id = sqlc.arg(chat_id))
-)
-SELECT chat_id, user_id, role, joined_at
-FROM (
-  SELECT * FROM owner_participant
-  UNION ALL
-  SELECT * FROM member_participant
-) p
+SELECT b.id AS chat_id, b.owner_user_id AS user_id, 'owner'::text AS role, b.created_at AS joined_at
+FROM bots b
+WHERE b.id = sqlc.arg(chat_id)
 ORDER BY joined_at ASC;
 
 -- name: RemoveChatParticipant :exec
-DELETE FROM bot_members
-WHERE bot_id = sqlc.arg(chat_id)
-  AND user_id = sqlc.arg(user_id)
-  AND user_id <> (SELECT owner_user_id FROM bots WHERE id = sqlc.arg(chat_id));
-
--- name: CopyParticipantsToChat :exec
-INSERT INTO bot_members (bot_id, user_id, role)
-SELECT sqlc.arg(chat_id_2), bm.user_id, bm.role
-FROM bot_members bm
-WHERE bm.bot_id = sqlc.arg(chat_id)
-ON CONFLICT (bot_id, user_id) DO NOTHING;
+SELECT 1
+WHERE EXISTS (
+  SELECT 1
+  FROM bots b
+  WHERE b.id = sqlc.arg(chat_id)
+    AND b.owner_user_id = sqlc.arg(user_id)
+);
 
 -- chat_settings