sync: update from private repo (caeb95c)

src/bridge/server.ts

@@ -22,7 +22,7 @@ import { setSessionManager } from '../engine/tools/browser.js';
 import { setUserFolderToolDeps } from '../engine/tools/user-folder.js';
 import { setSkillToolDeps } from '../engine/tools/skills.js';
 import { setAppDocsDeps } from '../engine/tools/app-docs.js';
-import { setupAuth, requireAuth, requireAdmin, isProviderConfigured, isLocalEnabled, buildChangePasswordHandler } from './auth.js';
+import { setupAuth, requireAuth, requireAdmin, isProviderConfigured, isLocalEnabled, buildChangePasswordHandler, resolveOrgIds } from './auth.js';
 import { canUserSeeTask } from './visibility.js';
 import { mountAdminApi } from './admin-api.js';
 import { createAdminGatewayApi } from './admin-gateway-api.js';
@@ -698,7 +698,7 @@ export function createCoreServer(opts: CoreServerOptions): {
             getUserAccess: (userId) => {
               const user = repo.getUserById(userId);
               const isAdmin = user?.role === 'admin';
-              const orgIds = repo.listUserGiteaOrgs(userId).map((o) => o.orgId);
+              const orgIds = resolveOrgIds(repo, userId);
               return { isAdmin, orgIds };
             },
             sshExec,
@@ -757,7 +757,7 @@ export function createCoreServer(opts: CoreServerOptions): {
                 avatarUrl: null,
                 role: (user.role === 'admin' ? 'admin' : 'user'),
                 status: 'active',
-                orgIds: repo.listUserGiteaOrgs(user.id).map((o) => o.orgId),
+                orgIds: resolveOrgIds(repo, user.id),
                 defaultVisibility: 'private',
                 defaultVisibilityOrgId: null,
               };
@@ -773,7 +773,7 @@ export function createCoreServer(opts: CoreServerOptions): {
             resolveSshAccess: async (user, session, task) => {
               const connection = connectionRepo.resolveConnection(session.connectionId);
               if (!connection) return false;
-              const orgIds = repo.listUserGiteaOrgs(user.id).map((o) => o.orgId);
+              const orgIds = resolveOrgIds(repo, user.id);
               const decision = accessResolver.resolveAccess({
                 connection,
                 userId: user.id,