mirror of
https://gh-proxy.org/https://github.com/klinsmaya/multica.git
synced 2026-11-08 01:16:45 +08:00
Adds the backend for the operations console: platform_admin roles (super_admin / operator / viewer), an admin_audit_log table, and user.disabled_at so disabling an account is a stored state instead of a hard-coded denylist. The in-process disabled set is now refreshed from the database every 30 seconds, and the old emergency denylist entries are migrated into it. /api/admin exposes overview counts, user and workspace listings with detail, disable/enable, token revocation, the audit log, and platform role management. Every write requires a reason and is recorded with the actor, IP and user agent. PLATFORM_ADMIN_EMAILS bootstraps the first super_admin. Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01FrVjAFWeckYV69HS51xUhy
330 lines
9.5 KiB
Go
330 lines
9.5 KiB
Go
// Code generated by sqlc. DO NOT EDIT.
|
|
// versions:
|
|
// sqlc v1.31.1
|
|
// source: user.sql
|
|
|
|
package db
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/jackc/pgx/v5/pgtype"
|
|
)
|
|
|
|
const createUser = `-- name: CreateUser :one
|
|
INSERT INTO "user" (name, email, avatar_url)
|
|
VALUES ($1, $2, $3)
|
|
RETURNING id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason
|
|
`
|
|
|
|
type CreateUserParams struct {
|
|
Name string `json:"name"`
|
|
Email string `json:"email"`
|
|
AvatarUrl pgtype.Text `json:"avatar_url"`
|
|
}
|
|
|
|
func (q *Queries) CreateUser(ctx context.Context, arg CreateUserParams) (User, error) {
|
|
row := q.db.QueryRow(ctx, createUser, arg.Name, arg.Email, arg.AvatarUrl)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Name,
|
|
&i.Email,
|
|
&i.AvatarUrl,
|
|
&i.CreatedAt,
|
|
&i.UpdatedAt,
|
|
&i.OnboardedAt,
|
|
&i.OnboardingQuestionnaire,
|
|
&i.CloudWaitlistEmail,
|
|
&i.CloudWaitlistReason,
|
|
&i.StarterContentState,
|
|
&i.Language,
|
|
&i.ProfileDescription,
|
|
&i.Timezone,
|
|
&i.DisabledAt,
|
|
&i.DisabledReason,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const getUser = `-- name: GetUser :one
|
|
SELECT id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason FROM "user"
|
|
WHERE id = $1
|
|
`
|
|
|
|
func (q *Queries) GetUser(ctx context.Context, id pgtype.UUID) (User, error) {
|
|
row := q.db.QueryRow(ctx, getUser, id)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Name,
|
|
&i.Email,
|
|
&i.AvatarUrl,
|
|
&i.CreatedAt,
|
|
&i.UpdatedAt,
|
|
&i.OnboardedAt,
|
|
&i.OnboardingQuestionnaire,
|
|
&i.CloudWaitlistEmail,
|
|
&i.CloudWaitlistReason,
|
|
&i.StarterContentState,
|
|
&i.Language,
|
|
&i.ProfileDescription,
|
|
&i.Timezone,
|
|
&i.DisabledAt,
|
|
&i.DisabledReason,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const getUserByEmail = `-- name: GetUserByEmail :one
|
|
SELECT id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason FROM "user"
|
|
WHERE email = $1
|
|
`
|
|
|
|
func (q *Queries) GetUserByEmail(ctx context.Context, email string) (User, error) {
|
|
row := q.db.QueryRow(ctx, getUserByEmail, email)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Name,
|
|
&i.Email,
|
|
&i.AvatarUrl,
|
|
&i.CreatedAt,
|
|
&i.UpdatedAt,
|
|
&i.OnboardedAt,
|
|
&i.OnboardingQuestionnaire,
|
|
&i.CloudWaitlistEmail,
|
|
&i.CloudWaitlistReason,
|
|
&i.StarterContentState,
|
|
&i.Language,
|
|
&i.ProfileDescription,
|
|
&i.Timezone,
|
|
&i.DisabledAt,
|
|
&i.DisabledReason,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const getUsersByIDs = `-- name: GetUsersByIDs :many
|
|
SELECT id, name, email, avatar_url FROM "user"
|
|
WHERE id = ANY($1::uuid[])
|
|
`
|
|
|
|
type GetUsersByIDsRow struct {
|
|
ID pgtype.UUID `json:"id"`
|
|
Name string `json:"name"`
|
|
Email string `json:"email"`
|
|
AvatarUrl pgtype.Text `json:"avatar_url"`
|
|
}
|
|
|
|
// Batch lookup from the GLOBAL user table (not gated on membership, so departed
|
|
// members still render). Used to enrich attribution initiator / originator refs on
|
|
// task responses without an N+1 (MUL-4302 §9). Returns only the display fields.
|
|
func (q *Queries) GetUsersByIDs(ctx context.Context, ids []pgtype.UUID) ([]GetUsersByIDsRow, error) {
|
|
rows, err := q.db.Query(ctx, getUsersByIDs, ids)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer rows.Close()
|
|
items := []GetUsersByIDsRow{}
|
|
for rows.Next() {
|
|
var i GetUsersByIDsRow
|
|
if err := rows.Scan(
|
|
&i.ID,
|
|
&i.Name,
|
|
&i.Email,
|
|
&i.AvatarUrl,
|
|
); err != nil {
|
|
return nil, err
|
|
}
|
|
items = append(items, i)
|
|
}
|
|
if err := rows.Err(); err != nil {
|
|
return nil, err
|
|
}
|
|
return items, nil
|
|
}
|
|
|
|
const joinCloudWaitlist = `-- name: JoinCloudWaitlist :one
|
|
UPDATE "user" SET
|
|
cloud_waitlist_email = $2,
|
|
cloud_waitlist_reason = $3,
|
|
updated_at = now()
|
|
WHERE id = $1
|
|
RETURNING id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason
|
|
`
|
|
|
|
type JoinCloudWaitlistParams struct {
|
|
ID pgtype.UUID `json:"id"`
|
|
CloudWaitlistEmail pgtype.Text `json:"cloud_waitlist_email"`
|
|
CloudWaitlistReason pgtype.Text `json:"cloud_waitlist_reason"`
|
|
}
|
|
|
|
// Records interest in cloud runtimes. Does NOT mark onboarding
|
|
// complete — the user still has to pick a real path (CLI / Skip)
|
|
// in Step 3. Repeating the call overwrites email + reason.
|
|
func (q *Queries) JoinCloudWaitlist(ctx context.Context, arg JoinCloudWaitlistParams) (User, error) {
|
|
row := q.db.QueryRow(ctx, joinCloudWaitlist, arg.ID, arg.CloudWaitlistEmail, arg.CloudWaitlistReason)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Name,
|
|
&i.Email,
|
|
&i.AvatarUrl,
|
|
&i.CreatedAt,
|
|
&i.UpdatedAt,
|
|
&i.OnboardedAt,
|
|
&i.OnboardingQuestionnaire,
|
|
&i.CloudWaitlistEmail,
|
|
&i.CloudWaitlistReason,
|
|
&i.StarterContentState,
|
|
&i.Language,
|
|
&i.ProfileDescription,
|
|
&i.Timezone,
|
|
&i.DisabledAt,
|
|
&i.DisabledReason,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const markUserOnboarded = `-- name: MarkUserOnboarded :one
|
|
UPDATE "user" SET
|
|
onboarded_at = COALESCE(onboarded_at, now()),
|
|
updated_at = now()
|
|
WHERE id = $1
|
|
RETURNING id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason
|
|
`
|
|
|
|
func (q *Queries) MarkUserOnboarded(ctx context.Context, id pgtype.UUID) (User, error) {
|
|
row := q.db.QueryRow(ctx, markUserOnboarded, id)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Name,
|
|
&i.Email,
|
|
&i.AvatarUrl,
|
|
&i.CreatedAt,
|
|
&i.UpdatedAt,
|
|
&i.OnboardedAt,
|
|
&i.OnboardingQuestionnaire,
|
|
&i.CloudWaitlistEmail,
|
|
&i.CloudWaitlistReason,
|
|
&i.StarterContentState,
|
|
&i.Language,
|
|
&i.ProfileDescription,
|
|
&i.Timezone,
|
|
&i.DisabledAt,
|
|
&i.DisabledReason,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const patchUserOnboarding = `-- name: PatchUserOnboarding :one
|
|
UPDATE "user" SET
|
|
onboarding_questionnaire = COALESCE($1, onboarding_questionnaire),
|
|
updated_at = now()
|
|
WHERE id = $2
|
|
RETURNING id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason
|
|
`
|
|
|
|
type PatchUserOnboardingParams struct {
|
|
Questionnaire []byte `json:"questionnaire"`
|
|
ID pgtype.UUID `json:"id"`
|
|
}
|
|
|
|
// Partial update of the user's onboarding decision fields. Currently only the
|
|
// questionnaire JSONB is patchable — the v2 attempt at persisting Step 3
|
|
// runtime choice on the user row was reverted; that state now lives in a
|
|
// frontend Zustand transient store.
|
|
func (q *Queries) PatchUserOnboarding(ctx context.Context, arg PatchUserOnboardingParams) (User, error) {
|
|
row := q.db.QueryRow(ctx, patchUserOnboarding, arg.Questionnaire, arg.ID)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Name,
|
|
&i.Email,
|
|
&i.AvatarUrl,
|
|
&i.CreatedAt,
|
|
&i.UpdatedAt,
|
|
&i.OnboardedAt,
|
|
&i.OnboardingQuestionnaire,
|
|
&i.CloudWaitlistEmail,
|
|
&i.CloudWaitlistReason,
|
|
&i.StarterContentState,
|
|
&i.Language,
|
|
&i.ProfileDescription,
|
|
&i.Timezone,
|
|
&i.DisabledAt,
|
|
&i.DisabledReason,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const updateUser = `-- name: UpdateUser :one
|
|
UPDATE "user" SET
|
|
name = COALESCE($2, name),
|
|
avatar_url = COALESCE($3, avatar_url),
|
|
language = COALESCE($4, language),
|
|
profile_description = COALESCE($5, profile_description),
|
|
timezone = CASE
|
|
WHEN $6::text IS NULL THEN timezone
|
|
WHEN $6::text = '' THEN NULL
|
|
ELSE $6::text
|
|
END,
|
|
updated_at = now()
|
|
WHERE id = $1
|
|
RETURNING id, name, email, avatar_url, created_at, updated_at, onboarded_at, onboarding_questionnaire, cloud_waitlist_email, cloud_waitlist_reason, starter_content_state, language, profile_description, timezone, disabled_at, disabled_reason
|
|
`
|
|
|
|
type UpdateUserParams struct {
|
|
ID pgtype.UUID `json:"id"`
|
|
Name string `json:"name"`
|
|
AvatarUrl pgtype.Text `json:"avatar_url"`
|
|
Language pgtype.Text `json:"language"`
|
|
ProfileDescription pgtype.Text `json:"profile_description"`
|
|
Timezone pgtype.Text `json:"timezone"`
|
|
}
|
|
|
|
// Patches the user-controlled profile fields. Each parameter follows
|
|
// COALESCE-on-NULL semantics so the handler can omit any field it
|
|
// doesn't intend to write.
|
|
//
|
|
// `timezone` (Viewing-tz preference) participates in
|
|
// the same shape but uses sqlc.narg + a sentinel-string convention:
|
|
// the handler passes the empty string "" to mean "clear back to NULL"
|
|
// (browser-detected fallback), an IANA name like "Asia/Shanghai" to
|
|
// pin a value, and `sqlc.narg('timezone') IS NULL` (no value at all)
|
|
// to leave the existing column untouched. Folding it into UpdateUser
|
|
// rather than carrying a dedicated UpdateUserTimezone keeps the
|
|
// profile-patch shape uniform between Preferences fields.
|
|
func (q *Queries) UpdateUser(ctx context.Context, arg UpdateUserParams) (User, error) {
|
|
row := q.db.QueryRow(ctx, updateUser,
|
|
arg.ID,
|
|
arg.Name,
|
|
arg.AvatarUrl,
|
|
arg.Language,
|
|
arg.ProfileDescription,
|
|
arg.Timezone,
|
|
)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Name,
|
|
&i.Email,
|
|
&i.AvatarUrl,
|
|
&i.CreatedAt,
|
|
&i.UpdatedAt,
|
|
&i.OnboardedAt,
|
|
&i.OnboardingQuestionnaire,
|
|
&i.CloudWaitlistEmail,
|
|
&i.CloudWaitlistReason,
|
|
&i.StarterContentState,
|
|
&i.Language,
|
|
&i.ProfileDescription,
|
|
&i.Timezone,
|
|
&i.DisabledAt,
|
|
&i.DisabledReason,
|
|
)
|
|
return i, err
|
|
}
|