Function userScopedPrismaClientExtension

packages/web/src/prisma.ts:31–68

(user?: UserWithAccounts)

 * a given user should be able to access.
 */
export const userScopedPrismaClientExtension = async (user?: UserWithAccounts) => {
    const hasPermissionSyncing = env.PERMISSION_SYNC_ENABLED === 'true';

    return Prisma.defineExtension(
        (prisma) => {
            return prisma.$extends({
                query: {
                    ...getMcpPrismaQueryExtension(user),
                    ...(hasPermissionSyncing ? {
                        repo: {
                            async $allOperations({ args, query }) {
                                const argsWithWhere = args as Record<string, unknown> & {
                                    where?: Prisma.RepoWhereInput;
                                }

                                argsWithWhere.where = {
                                    ...(argsWithWhere.where || {}),
                                    ...getRepoPermissionFilterForUser(user),
                                };

                                return query(args);
                            }
                        },
                        searchContext: {
                            async $allOperations({ args, query }) {
                                injectRepoPermissionFilterIntoRelation(
                                    args as Record<string, unknown>,
                                    getRepoPermissionFilterForUser(user),
                                );

                                return query(args);
                            }
                        }
                    } : {})
                }
            })
        })
}

/**
 * Injects a `Repo` permission filter into a nested `repos` relation referenced