Janady13/missionmatch / internal/platform/database/dbgen/foundation.sql.go

1// Code generated by sqlc. DO NOT EDIT. 2// versions: 3// sqlc v1.31.1 4// source: foundation.sql 5 6package dbgen 7 8import ( 9 "context" 10 "time" 11 12 "github.com/google/uuid" 13) 14 15const createUser = `-- name: CreateUser :one 16INSERT INTO users (organization_id, email, full_name, role, status) 17VALUES ($1,$2,$3,$4,$5) 18RETURNING id, organization_id, email, full_name, role, status, last_login_at, created_at, updated_at, mfa_enrolled, title, phone 19` 20 21type CreateUserParams struct { 22 OrganizationID uuid.UUID `json:"organization_id"` 23 Email string `json:"email"` 24 FullName string `json:"full_name"` 25 Role string `json:"role"` 26 Status string `json:"status"` 27} 28 29func (q *Queries) CreateUser(ctx context.Context, arg CreateUserParams) (User, error) { 30 row := q.db.QueryRow(ctx, createUser, 31 arg.OrganizationID, 32 arg.Email, 33 arg.FullName, 34 arg.Role, 35 arg.Status, 36 ) 37 var i User 38 err := row.Scan( 39 &i.ID, 40 &i.OrganizationID, 41 &i.Email, 42 &i.FullName, 43 &i.Role, 44 &i.Status, 45 &i.LastLoginAt, 46 &i.CreatedAt, 47 &i.UpdatedAt, 48 &i.MfaEnrolled, 49 &i.Title, 50 &i.Phone, 51 ) 52 return i, err 53} 54 55const getOrganization = `-- name: GetOrganization :one 56SELECT id, name, slug, status, created_at, updated_at, display_name, logo, logo_mime, logo_updated_at, time_zone FROM organizations WHERE id = $1 57` 58 59func (q *Queries) GetOrganization(ctx context.Context, id uuid.UUID) (Organization, error) { 60 row := q.db.QueryRow(ctx, getOrganization, id) 61 var i Organization 62 err := row.Scan( 63 &i.ID, 64 &i.Name, 65 &i.Slug, 66 &i.Status, 67 &i.CreatedAt, 68 &i.UpdatedAt, 69 &i.DisplayName, 70 &i.Logo, 71 &i.LogoMime, 72 &i.LogoUpdatedAt, 73 &i.TimeZone, 74 ) 75 return i, err 76} 77 78const getUser = `-- name: GetUser :one 79SELECT id, organization_id, email, full_name, role, status, last_login_at, created_at, updated_at, mfa_enrolled, title, phone FROM users WHERE id = $1 80` 81 82func (q *Queries) GetUser(ctx context.Context, id uuid.UUID) (User, error) { 83 row := q.db.QueryRow(ctx, getUser, id) 84 var i User 85 err := row.Scan( 86 &i.ID, 87 &i.OrganizationID, 88 &i.Email, 89 &i.FullName, 90 &i.Role, 91 &i.Status, 92 &i.LastLoginAt, 93 &i.CreatedAt, 94 &i.UpdatedAt, 95 &i.MfaEnrolled, 96 &i.Title, 97 &i.Phone, 98 ) 99 return i, err 100} 101 102const getUserByEmail = `-- name: GetUserByEmail :one 103SELECT id, organization_id, email, full_name, role, status, last_login_at, created_at, updated_at, mfa_enrolled, title, phone FROM users WHERE lower(email) = lower($1) 104` 105 106func (q *Queries) GetUserByEmail(ctx context.Context, lower string) (User, error) { 107 row := q.db.QueryRow(ctx, getUserByEmail, lower) 108 var i User 109 err := row.Scan( 110 &i.ID, 111 &i.OrganizationID, 112 &i.Email, 113 &i.FullName, 114 &i.Role, 115 &i.Status, 116 &i.LastLoginAt, 117 &i.CreatedAt, 118 &i.UpdatedAt, 119 &i.MfaEnrolled, 120 &i.Title, 121 &i.Phone, 122 ) 123 return i, err 124} 125 126const insertAuditLog = `-- name: InsertAuditLog :one 127INSERT INTO audit_logs ( 128 organization_id, actor_user_id, action, entity_type, entity_id, 129 old_values, new_values, ip_address, user_agent 130) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9) 131RETURNING id, created_at 132` 133 134type InsertAuditLogParams struct { 135 OrganizationID *uuid.UUID `json:"organization_id"` 136 ActorUserID *uuid.UUID `json:"actor_user_id"` 137 Action string `json:"action"` 138 EntityType *string `json:"entity_type"` 139 EntityID *string `json:"entity_id"` 140 OldValues []byte `json:"old_values"` 141 NewValues []byte `json:"new_values"` 142 IpAddress *string `json:"ip_address"` 143 UserAgent *string `json:"user_agent"` 144} 145 146type InsertAuditLogRow struct { 147 ID int64 `json:"id"` 148 CreatedAt time.Time `json:"created_at"` 149} 150 151// audit_logs is append-only (enforced by trigger); only INSERT/SELECT are granted. 152func (q *Queries) InsertAuditLog(ctx context.Context, arg InsertAuditLogParams) (InsertAuditLogRow, error) { 153 row := q.db.QueryRow(ctx, insertAuditLog, 154 arg.OrganizationID, 155 arg.ActorUserID, 156 arg.Action, 157 arg.EntityType, 158 arg.EntityID, 159 arg.OldValues, 160 arg.NewValues, 161 arg.IpAddress, 162 arg.UserAgent, 163 ) 164 var i InsertAuditLogRow 165 err := row.Scan(&i.ID, &i.CreatedAt) 166 return i, err 167} 168 169const listAuditLogsForOrg = `-- name: ListAuditLogsForOrg :many 170SELECT id, organization_id, actor_user_id, action, entity_type, entity_id, old_values, new_values, ip_address, user_agent, created_at FROM audit_logs 171WHERE organization_id = NULLIF(current_setting('app.current_org_id', true), '')::uuid 172ORDER BY created_at DESC, id DESC 173LIMIT $1 OFFSET $2 174` 175 176type ListAuditLogsForOrgParams struct { 177 Limit int32 `json:"limit"` 178 Offset int32 `json:"offset"` 179} 180 181// audit_logs has NO RLS policy by design. Bind the read to the validated session GUC (NOT a 182// caller supplied org param) so it inherits the same fail closed default deny as every RLS table, 183// a missing or wrong org can no longer leak another tenant's trail. Run inside RunInTenantTx so the GUC 184// is set [review AUDIT-2/RLS-3]. 185func (q *Queries) ListAuditLogsForOrg(ctx context.Context, arg ListAuditLogsForOrgParams) ([]AuditLog, error) { 186 rows, err := q.db.Query(ctx, listAuditLogsForOrg, arg.Limit, arg.Offset) 187 if err != nil { 188 return nil, err 189 } 190 defer rows.Close() 191 items := []AuditLog{} 192 for rows.Next() { 193 var i AuditLog 194 if err := rows.Scan( 195 &i.ID, 196 &i.OrganizationID, 197 &i.ActorUserID, 198 &i.Action, 199 &i.EntityType, 200 &i.EntityID, 201 &i.OldValues, 202 &i.NewValues, 203 &i.IpAddress, 204 &i.UserAgent, 205 &i.CreatedAt, 206 ); err != nil { 207 return nil, err 208 } 209 items = append(items, i) 210 } 211 if err := rows.Err(); err != nil { 212 return nil, err 213 } 214 return items, nil 215} 216 217const listSystemAuditLogs = `-- name: ListSystemAuditLogs :many 218SELECT id, organization_id, actor_user_id, action, entity_type, entity_id, old_values, new_values, ip_address, user_agent, created_at FROM audit_logs 219WHERE organization_id IS NULL 220ORDER BY created_at DESC, id DESC 221LIMIT $1 OFFSET $2 222` 223 224type ListSystemAuditLogsParams struct { 225 Limit int32 `json:"limit"` 226 Offset int32 `json:"offset"` 227} 228 229// Platform/security events with NO org (e.g. failed logins before org resolution). Privileged read 230// path only, never the per-tenant app path, so these events are not a black hole [review AUDIT-3]. 231func (q *Queries) ListSystemAuditLogs(ctx context.Context, arg ListSystemAuditLogsParams) ([]AuditLog, error) { 232 rows, err := q.db.Query(ctx, listSystemAuditLogs, arg.Limit, arg.Offset) 233 if err != nil { 234 return nil, err 235 } 236 defer rows.Close() 237 items := []AuditLog{} 238 for rows.Next() { 239 var i AuditLog 240 if err := rows.Scan( 241 &i.ID, 242 &i.OrganizationID, 243 &i.ActorUserID, 244 &i.Action, 245 &i.EntityType, 246 &i.EntityID, 247 &i.OldValues, 248 &i.NewValues, 249 &i.IpAddress, 250 &i.UserAgent, 251 &i.CreatedAt, 252 ); err != nil { 253 return nil, err 254 } 255 items = append(items, i) 256 } 257 if err := rows.Err(); err != nil { 258 return nil, err 259 } 260 return items, nil 261} 262 263const listUsers = `-- name: ListUsers :many 264SELECT id, organization_id, email, full_name, role, status, last_login_at, created_at, updated_at, mfa_enrolled, title, phone FROM users ORDER BY created_at DESC, id LIMIT $1 OFFSET $2 265` 266 267type ListUsersParams struct { 268 Limit int32 `json:"limit"` 269 Offset int32 `json:"offset"` 270} 271 272func (q *Queries) ListUsers(ctx context.Context, arg ListUsersParams) ([]User, error) { 273 rows, err := q.db.Query(ctx, listUsers, arg.Limit, arg.Offset) 274 if err != nil { 275 return nil, err 276 } 277 defer rows.Close() 278 items := []User{} 279 for rows.Next() { 280 var i User 281 if err := rows.Scan( 282 &i.ID, 283 &i.OrganizationID, 284 &i.Email, 285 &i.FullName, 286 &i.Role, 287 &i.Status, 288 &i.LastLoginAt, 289 &i.CreatedAt, 290 &i.UpdatedAt, 291 &i.MfaEnrolled, 292 &i.Title, 293 &i.Phone, 294 ); err != nil { 295 return nil, err 296 } 297 items = append(items, i) 298 } 299 if err := rows.Err(); err != nil { 300 return nil, err 301 } 302 return items, nil 303} 304 305const touchUserLogin = `-- name: TouchUserLogin :exec 306UPDATE users SET last_login_at = now(), updated_at = now() WHERE id = $1 307` 308 309func (q *Queries) TouchUserLogin(ctx context.Context, id uuid.UUID) error { 310 _, err := q.db.Exec(ctx, touchUserLogin, id) 311 return err 312} 313