Scope knowledge and image libraries by brand

server/internal/tenant/app/article_service.go

@@ -492,6 +492,7 @@ func (s *ArticleService) loadArticleDetail(ctx context.Context, tenantID, brandI
 			ctx,
 			s.pool,
 			tenantID,
+			brandID,
 			markdownValue,
 			item.CoverImageAssetID,
 		)
@@ -628,6 +629,7 @@ func (s *ArticleService) Update(ctx context.Context, id int64, req UpdateArticle
 		ctx,
 		tx,
 		actor.TenantID,
+		brandID,
 		markdown,
 		coverImageAssetID,
 	)
@@ -1037,12 +1039,13 @@ func (s *ArticleService) resolveArticleImageMetadata(
 	ctx context.Context,
 	q imageAssetLookupQueryer,
 	tenantID int64,
+	brandID int64,
 	markdown string,
 	coverImageAssetID *int64,
 ) (string, []int64, *int64, error) {
 	referencedImageAssetIDs := extractReferencedImageAssetIDsFromMarkdown(markdown)
 	imageAssetIDsToValidate := collectImageAssetIDsForValidation(referencedImageAssetIDs, coverImageAssetID)
-	activeImageAssetIDs, err := s.loadActiveImageAssetIDSet(ctx, q, tenantID, imageAssetIDsToValidate)
+	activeImageAssetIDs, err := s.loadActiveImageAssetIDSet(ctx, q, tenantID, brandID, imageAssetIDsToValidate)
 	if err != nil {
 		return "", nil, nil, err
 	}
@@ -1064,6 +1067,7 @@ func (s *ArticleService) loadActiveImageAssetIDSet(
 	ctx context.Context,
 	q imageAssetLookupQueryer,
 	tenantID int64,
+	brandID int64,
 	imageAssetIDs []int64,
 ) (map[int64]struct{}, error) {
 	if len(imageAssetIDs) == 0 {
@@ -1073,11 +1077,12 @@ func (s *ArticleService) loadActiveImageAssetIDSet(
 	rows, err := q.Query(ctx, `
 SELECT id
 FROM image_assets
-WHERE tenant_id = $1
-  AND id = ANY($2::BIGINT[])
-  AND status = 'active'
-  AND deleted_at IS NULL
-`, tenantID, imageAssetIDs)
+	WHERE tenant_id = $1
+	  AND brand_id = $2
+	  AND id = ANY($3::BIGINT[])
+	  AND status = 'active'
+	  AND deleted_at IS NULL
+	`, tenantID, brandID, imageAssetIDs)
 	if err != nil {
 		return nil, response.ErrInternal(50012, "update_failed", "failed to validate image assets")
 	}