Changeset 0.16.0 (#74)

server/store/postgres/knowledge_bases.go

@@ -68,7 +68,7 @@ func (s *KnowledgeBaseStore) Delete(ctx context.Context, id string) error {
 // ── Scoped Listing ──────────────────────────────
 
 func (s *KnowledgeBaseStore) ListForUser(ctx context.Context, userID string, teamIDs []string) ([]models.KnowledgeBase, error) {
-	// User can see: global + their teams + personal.
+	// User can see: global + their teams + personal + group-granted.
 	q := `
 		SELECT id, name, description, scope, owner_id, team_id, embedding_config,
 			document_count, chunk_count, total_bytes, status, created_at, updated_at
@@ -83,6 +83,23 @@ func (s *KnowledgeBaseStore) ListForUser(ctx context.Context, userID string, tea
 		args = append(args, pq.Array(teamIDs))
 	}
 
+	// Group-granted KBs
+	q += fmt.Sprintf(`
+		   OR id IN (
+			SELECT rg.resource_id FROM resource_grants rg
+			WHERE rg.resource_type = 'knowledge_base'
+			  AND (
+				rg.grant_scope = 'global'
+				OR (rg.grant_scope = 'groups'
+				    AND EXISTS (
+				        SELECT 1 FROM group_members gm
+				        WHERE gm.user_id = $%d
+				          AND gm.group_id = ANY(rg.granted_groups)
+				    ))
+			  )
+		)`, len(args)+1)
+	args = append(args, userID)
+
 	q += ` ORDER BY name`
 	return queryKBs(ctx, q, args...)
 }