feat: assert user is member of workspace for board routes

packages/db/src/repository/board.repo.ts

@@ -311,6 +311,7 @@ export const getWithListIdsByPublicId = (
   return db.query.boards.findFirst({
     columns: {
       id: true,
+      workspaceId: true,
     },
     with: {
       lists: {
@@ -330,6 +331,7 @@ export const getWithLatestListIndexByPublicId = (
   return db.query.boards.findFirst({
     columns: {
       id: true,
+      workspaceId: true,
     },
     with: {
       lists: {
@@ -450,3 +452,17 @@ export const isSlugUnique = async (
 
   return result === undefined;
 };
+
+export const getWorkspaceIdByBoardPublicId = async (
+  db: dbClient,
+  boardPublicId: string,
+) => {
+  const result = await db.query.boards.findFirst({
+    columns: {
+      workspaceId: true,
+    },
+    where: eq(boards.publicId, boardPublicId),
+  });
+
+  return result?.workspaceId;
+};

packages/db/src/repository/workspace.repo.ts

@@ -220,3 +220,23 @@ export const isWorkspaceSlugAvailable = async (
 
   return result === undefined;
 };
+
+export const isUserInWorkspace = async (
+  db: dbClient,
+  userId: string,
+  workspaceId: number,
+) => {
+  const result = await db.query.workspaceMembers.findFirst({
+    columns: {
+      id: true,
+    },
+    where: and(
+      eq(workspaceMembers.userId, userId),
+      eq(workspaceMembers.workspaceId, workspaceId),
+      eq(workspaceMembers.status, "active"),
+      isNull(workspaceMembers.deletedAt),
+    ),
+  });
+
+  return result?.id !== undefined;
+};