Function getActivelyBannedUserIds

apps/sim/lib/auth/ban.ts:38–53

(userIds: string[])

 * failure — callers must fail closed.
 */
export async function getActivelyBannedUserIds(userIds: string[]): Promise<string[]> {
  const ids = [...new Set(userIds.filter(Boolean))]
  if (ids.length === 0) return []

  const [accessControl, rows] = await Promise.all([
    getAccessControlConfig(),
    db
      .select({ id: user.id, email: user.email, banned: user.banned, banExpires: user.banExpires })
      .from(user)
      .where(inArray(user.id, ids)),
  ])

  return rows
    .filter((row) => isBanActive(row) || isEmailBlockedByAccessControl(row.email, accessControl))
    .map((row) => row.id)
}