add multi-user memory sharing with r/w permissions
- New migration 004: memory_shares and tag_shares tables with indexes
- Share individual memories or entire tags with other users (read/write)
- Tag shares are live rules: future memories with shared tags auto-visible
- Recall query merges own + shared memories via UNION, returns shared_by field
- Owner-only delete enforcement (403 for non-owners, even with write access)
- PUT /api/memories/{id} update endpoint with permission checks
- 5 new MCP SSE tools: memory_share, memory_unshare, memory_share_tag,
memory_unshare_tag, memory_update
- Permission helper checks ownership, individual shares, and tag shares
This commit is contained in:
parent
1a275e976c
commit
f45e8ce2b3
4 changed files with 556 additions and 13 deletions
62
migrations/versions/004_add_sharing.py
Normal file
62
migrations/versions/004_add_sharing.py
Normal file
|
|
@ -0,0 +1,62 @@
|
|||
"""Add memory sharing tables.
|
||||
|
||||
Revision ID: 004
|
||||
Revises: 003
|
||||
Create Date: 2026-03-22
|
||||
"""
|
||||
from typing import Sequence, Union
|
||||
|
||||
from alembic import op
|
||||
import sqlalchemy as sa
|
||||
|
||||
revision: str = "004"
|
||||
down_revision: Union[str, None] = "003"
|
||||
branch_labels: Union[str, Sequence[str], None] = None
|
||||
depends_on: Union[str, Sequence[str], None] = None
|
||||
|
||||
|
||||
def _table_exists(conn, table_name: str) -> bool:
|
||||
result = conn.execute(
|
||||
sa.text(
|
||||
"SELECT EXISTS(SELECT 1 FROM information_schema.tables "
|
||||
"WHERE table_name = :tbl)"
|
||||
),
|
||||
{"tbl": table_name},
|
||||
)
|
||||
return result.scalar()
|
||||
|
||||
|
||||
def upgrade() -> None:
|
||||
conn = op.get_bind()
|
||||
|
||||
if not _table_exists(conn, "memory_shares"):
|
||||
op.create_table(
|
||||
"memory_shares",
|
||||
sa.Column("id", sa.Integer, primary_key=True, autoincrement=True),
|
||||
sa.Column("memory_id", sa.Integer, sa.ForeignKey("memories.id"), nullable=False),
|
||||
sa.Column("owner_id", sa.String(100), nullable=False),
|
||||
sa.Column("shared_with", sa.String(100), nullable=False),
|
||||
sa.Column("permission", sa.String(10), nullable=False, server_default="read"),
|
||||
sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.text("NOW()")),
|
||||
sa.UniqueConstraint("memory_id", "shared_with", name="uq_memory_shares_memory_user"),
|
||||
)
|
||||
op.create_index("idx_shares_shared_with", "memory_shares", ["shared_with"])
|
||||
op.create_index("idx_shares_memory_id", "memory_shares", ["memory_id"])
|
||||
|
||||
if not _table_exists(conn, "tag_shares"):
|
||||
op.create_table(
|
||||
"tag_shares",
|
||||
sa.Column("id", sa.Integer, primary_key=True, autoincrement=True),
|
||||
sa.Column("owner_id", sa.String(100), nullable=False),
|
||||
sa.Column("tag", sa.String(100), nullable=False),
|
||||
sa.Column("shared_with", sa.String(100), nullable=False),
|
||||
sa.Column("permission", sa.String(10), nullable=False, server_default="read"),
|
||||
sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.text("NOW()")),
|
||||
sa.UniqueConstraint("owner_id", "tag", "shared_with", name="uq_tag_shares_owner_tag_user"),
|
||||
)
|
||||
op.create_index("idx_tag_shares_shared_with", "tag_shares", ["shared_with"])
|
||||
|
||||
|
||||
def downgrade() -> None:
|
||||
op.drop_table("tag_shares")
|
||||
op.drop_table("memory_shares")
|
||||
Loading…
Add table
Add a link
Reference in a new issue