Function buildScopingPostgres

packages/core/src/scripts/db/scoping.ts:218–264

(
  pgSql: any,
)

 * Returns setup/teardown SQL to run before/after the user's query.
 */
export async function buildScopingPostgres(
  pgSql: any,
): Promise<ScopingContext> {
  const inactive: ScopingContext = {
    setup: [],
    teardown: [],
    active: false,
    userEmail: null,
    orgId: null,
    ownerEmailTables: new Set(),
    orgIdTables: new Set(),
  };

  // Scoping is always active when there is a request user (dev, preview, and
  // prod). Previously this short-circuited outside production, which created
  // a cross-user read in dev mode. See audit 05-tools-sandbox.md (C3.d).
  const userEmail = getUserEmail();
  if (!userEmail) return inactive;

  const orgId = getOrgId();
  const allColumns = await discoverColumnsPostgres(pgSql);
  const scoped = buildScopedTables(allColumns, userEmail, orgId, true);

  // Track which tables have owner_email / org_id for INSERT injection
  const columnsByTable = new Map<string, string[]>();
  for (const { table, column } of allColumns) {
    const cols = columnsByTable.get(table) || [];
    cols.push(column);
    columnsByTable.set(table, cols);
  }
  const ownerEmailTables = new Set<string>();
  const orgIdTables = new Set<string>();
  for (const [table, columns] of columnsByTable) {
    if (columns.includes(OWNER_COLUMN)) ownerEmailTables.add(table);
    if (columns.includes(ORG_COLUMN)) orgIdTables.add(table);
  }

  return {
    setup: scoped.map((s) => s.viewSql),
    teardown: scoped.map((s) => `DROP VIEW IF EXISTS pg_temp."${s.name}"`),
    active: scoped.length > 0,
    userEmail,
    orgId,
    ownerEmailTables,
    orgIdTables,
  };
}

/**
 * Build scoping context for a SQLite/libsql connection.