Files
multica/server/pkg/db/generated/user.sql.go
Claude 396752349f feat(server): platform admin API with audit log and DB-backed disabled users
Adds the backend for the operations console: platform_admin roles
(super_admin / operator / viewer), an admin_audit_log table, and
user.disabled_at so disabling an account is a stored state instead of a
hard-coded denylist. The in-process disabled set is now refreshed from the
database every 30 seconds, and the old emergency denylist entries are
migrated into it.

/api/admin exposes overview counts, user and workspace listings with
detail, disable/enable, token revocation, the audit log, and platform
role management. Every write requires a reason and is recorded with the
actor, IP and user agent. PLATFORM_ADMIN_EMAILS bootstraps the first
super_admin.

Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01FrVjAFWeckYV69HS51xUhy
2026-10-31 10:05:25 +00:00

330 lines
9.5 KiB
Go

// Code generated by sqlc. DO NOT EDIT.
// versions:
// sqlc v1.31.1
// source: user.sql
package db
import (
"context"
"github.com/jackc/pgx/v5/pgtype"
)
const createUser = `-- name: CreateUser :one
INSERT INTO "user" (name, email, avatar_url)
VALUES ($1, $2, $3)
RETURNING id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason
`
type CreateUserParams struct {
Name string `json:"name"`
Email string `json:"email"`
AvatarUrl pgtype.Text `json:"avatar_url"`
}
func (q *Queries) CreateUser(ctx context.Context, arg CreateUserParams) (User, error) {
row := q.db.QueryRow(ctx, createUser, arg.Name, arg.Email, arg.AvatarUrl)
var i User
err := row.Scan(
&i.ID,
&i.Name,
&i.Email,
&i.AvatarUrl,
&i.CreatedAt,
&i.UpdatedAt,
&i.OnboardedAt,
&i.OnboardingQuestionnaire,
&i.CloudWaitlistEmail,
&i.CloudWaitlistReason,
&i.StarterContentState,
&i.Language,
&i.ProfileDescription,
&i.Timezone,
&i.DisabledAt,
&i.DisabledReason,
)
return i, err
}
const getUser = `-- name: GetUser :one
SELECT id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason FROM "user"
WHERE id = $1
`
func (q *Queries) GetUser(ctx context.Context, id pgtype.UUID) (User, error) {
row := q.db.QueryRow(ctx, getUser, id)
var i User
err := row.Scan(
&i.ID,
&i.Name,
&i.Email,
&i.AvatarUrl,
&i.CreatedAt,
&i.UpdatedAt,
&i.OnboardedAt,
&i.OnboardingQuestionnaire,
&i.CloudWaitlistEmail,
&i.CloudWaitlistReason,
&i.StarterContentState,
&i.Language,
&i.ProfileDescription,
&i.Timezone,
&i.DisabledAt,
&i.DisabledReason,
)
return i, err
}
const getUserByEmail = `-- name: GetUserByEmail :one
SELECT id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason FROM "user"
WHERE email = $1
`
func (q *Queries) GetUserByEmail(ctx context.Context, email string) (User, error) {
row := q.db.QueryRow(ctx, getUserByEmail, email)
var i User
err := row.Scan(
&i.ID,
&i.Name,
&i.Email,
&i.AvatarUrl,
&i.CreatedAt,
&i.UpdatedAt,
&i.OnboardedAt,
&i.OnboardingQuestionnaire,
&i.CloudWaitlistEmail,
&i.CloudWaitlistReason,
&i.StarterContentState,
&i.Language,
&i.ProfileDescription,
&i.Timezone,
&i.DisabledAt,
&i.DisabledReason,
)
return i, err
}
const getUsersByIDs = `-- name: GetUsersByIDs :many
SELECT id, name, email, avatar_url FROM "user"
WHERE id = ANY($1::uuid[])
`
type GetUsersByIDsRow struct {
ID pgtype.UUID `json:"id"`
Name string `json:"name"`
Email string `json:"email"`
AvatarUrl pgtype.Text `json:"avatar_url"`
}
// Batch lookup from the GLOBAL user table (not gated on membership, so departed
// members still render). Used to enrich attribution initiator / originator refs on
// task responses without an N+1 (MUL-4302 §9). Returns only the display fields.
func (q *Queries) GetUsersByIDs(ctx context.Context, ids []pgtype.UUID) ([]GetUsersByIDsRow, error) {
rows, err := q.db.Query(ctx, getUsersByIDs, ids)
if err != nil {
return nil, err
}
defer rows.Close()
items := []GetUsersByIDsRow{}
for rows.Next() {
var i GetUsersByIDsRow
if err := rows.Scan(
&i.ID,
&i.Name,
&i.Email,
&i.AvatarUrl,
); err != nil {
return nil, err
}
items = append(items, i)
}
if err := rows.Err(); err != nil {
return nil, err
}
return items, nil
}
const joinCloudWaitlist = `-- name: JoinCloudWaitlist :one
UPDATE "user" SET
cloud_waitlist_email = $2,
cloud_waitlist_reason = $3,
updated_at = now()
WHERE id = $1
RETURNING id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason
`
type JoinCloudWaitlistParams struct {
ID pgtype.UUID `json:"id"`
CloudWaitlistEmail pgtype.Text `json:"cloud_waitlist_email"`
CloudWaitlistReason pgtype.Text `json:"cloud_waitlist_reason"`
}
// Records interest in cloud runtimes. Does NOT mark onboarding
// complete — the user still has to pick a real path (CLI / Skip)
// in Step 3. Repeating the call overwrites email + reason.
func (q *Queries) JoinCloudWaitlist(ctx context.Context, arg JoinCloudWaitlistParams) (User, error) {
row := q.db.QueryRow(ctx, joinCloudWaitlist, arg.ID, arg.CloudWaitlistEmail, arg.CloudWaitlistReason)
var i User
err := row.Scan(
&i.ID,
&i.Name,
&i.Email,
&i.AvatarUrl,
&i.CreatedAt,
&i.UpdatedAt,
&i.OnboardedAt,
&i.OnboardingQuestionnaire,
&i.CloudWaitlistEmail,
&i.CloudWaitlistReason,
&i.StarterContentState,
&i.Language,
&i.ProfileDescription,
&i.Timezone,
&i.DisabledAt,
&i.DisabledReason,
)
return i, err
}
const markUserOnboarded = `-- name: MarkUserOnboarded :one
UPDATE "user" SET
onboarded_at = COALESCE(onboarded_at, now()),
updated_at = now()
WHERE id = $1
RETURNING id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason
`
func (q *Queries) MarkUserOnboarded(ctx context.Context, id pgtype.UUID) (User, error) {
row := q.db.QueryRow(ctx, markUserOnboarded, id)
var i User
err := row.Scan(
&i.ID,
&i.Name,
&i.Email,
&i.AvatarUrl,
&i.CreatedAt,
&i.UpdatedAt,
&i.OnboardedAt,
&i.OnboardingQuestionnaire,
&i.CloudWaitlistEmail,
&i.CloudWaitlistReason,
&i.StarterContentState,
&i.Language,
&i.ProfileDescription,
&i.Timezone,
&i.DisabledAt,
&i.DisabledReason,
)
return i, err
}
const patchUserOnboarding = `-- name: PatchUserOnboarding :one
UPDATE "user" SET
onboarding_questionnaire = COALESCE($1, onboarding_questionnaire),
updated_at = now()
WHERE id = $2
RETURNING id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason
`
type PatchUserOnboardingParams struct {
Questionnaire []byte `json:"questionnaire"`
ID pgtype.UUID `json:"id"`
}
// Partial update of the user's onboarding decision fields. Currently only the
// questionnaire JSONB is patchable — the v2 attempt at persisting Step 3
// runtime choice on the user row was reverted; that state now lives in a
// frontend Zustand transient store.
func (q *Queries) PatchUserOnboarding(ctx context.Context, arg PatchUserOnboardingParams) (User, error) {
row := q.db.QueryRow(ctx, patchUserOnboarding, arg.Questionnaire, arg.ID)
var i User
err := row.Scan(
&i.ID,
&i.Name,
&i.Email,
&i.AvatarUrl,
&i.CreatedAt,
&i.UpdatedAt,
&i.OnboardedAt,
&i.OnboardingQuestionnaire,
&i.CloudWaitlistEmail,
&i.CloudWaitlistReason,
&i.StarterContentState,
&i.Language,
&i.ProfileDescription,
&i.Timezone,
&i.DisabledAt,
&i.DisabledReason,
)
return i, err
}
const updateUser = `-- name: UpdateUser :one
UPDATE "user" SET
name = COALESCE($2, name),
avatar_url = COALESCE($3, avatar_url),
language = COALESCE($4, language),
profile_description = COALESCE($5, profile_description),
timezone = CASE
WHEN $6::text IS NULL THEN timezone
WHEN $6::text = '' THEN NULL
ELSE $6::text
END,
updated_at = now()
WHERE id = $1
RETURNING id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason
`
type UpdateUserParams struct {
ID pgtype.UUID `json:"id"`
Name string `json:"name"`
AvatarUrl pgtype.Text `json:"avatar_url"`
Language pgtype.Text `json:"language"`
ProfileDescription pgtype.Text `json:"profile_description"`
Timezone pgtype.Text `json:"timezone"`
}
// Patches the user-controlled profile fields. Each parameter follows
// COALESCE-on-NULL semantics so the handler can omit any field it
// doesn't intend to write.
//
// `timezone` (Viewing-tz preference) participates in
// the same shape but uses sqlc.narg + a sentinel-string convention:
// the handler passes the empty string "" to mean "clear back to NULL"
// (browser-detected fallback), an IANA name like "Asia/Shanghai" to
// pin a value, and `sqlc.narg('timezone') IS NULL` (no value at all)
// to leave the existing column untouched. Folding it into UpdateUser
// rather than carrying a dedicated UpdateUserTimezone keeps the
// profile-patch shape uniform between Preferences fields.
func (q *Queries) UpdateUser(ctx context.Context, arg UpdateUserParams) (User, error) {
row := q.db.QueryRow(ctx, updateUser,
arg.ID,
arg.Name,
arg.AvatarUrl,
arg.Language,
arg.ProfileDescription,
arg.Timezone,
)
var i User
err := row.Scan(
&i.ID,
&i.Name,
&i.Email,
&i.AvatarUrl,
&i.CreatedAt,
&i.UpdatedAt,
&i.OnboardedAt,
&i.OnboardingQuestionnaire,
&i.CloudWaitlistEmail,
&i.CloudWaitlistReason,
&i.StarterContentState,
&i.Language,
&i.ProfileDescription,
&i.Timezone,
&i.DisabledAt,
&i.DisabledReason,
)
return i, err
}