Janady13/missionmatch / internal/platform/database/dbgen/foundation.sql.go

1// Code generated by sqlc. DO NOT EDIT. 2// versions: 3// sqlc v1.31.1 4// source: foundation.sql 5 6package dbgen 7 8import ( 9 "context" 10 "time" 11 12 "github.com/google/uuid" 13) 14 15const createUser = `-- name: CreateUser :one 16INSERT INTO users (organization_id, email, full_name, role, status) 17VALUES ($1,$2,$3,$4,$5) 18RETURNING id, organization_id, email, full_name, role, status, last_login_at, created_at, updated_at, mfa_enrolled 19` 20 21type CreateUserParams struct { 22 OrganizationID uuid.UUID `json:"organization_id"` 23 Email string `json:"email"` 24 FullName string `json:"full_name"` 25 Role string `json:"role"` 26 Status string `json:"status"` 27} 28 29func (q *Queries) CreateUser(ctx context.Context, arg CreateUserParams) (User, error) { 30 row := q.db.QueryRow(ctx, createUser, 31 arg.OrganizationID, 32 arg.Email, 33 arg.FullName, 34 arg.Role, 35 arg.Status, 36 ) 37 var i User 38 err := row.Scan( 39 &i.ID, 40 &i.OrganizationID, 41 &i.Email, 42 &i.FullName, 43 &i.Role, 44 &i.Status, 45 &i.LastLoginAt, 46 &i.CreatedAt, 47 &i.UpdatedAt, 48 &i.MfaEnrolled, 49 ) 50 return i, err 51} 52 53const getOrganization = `-- name: GetOrganization :one 54SELECT id, name, slug, status, created_at, updated_at FROM organizations WHERE id = $1 55` 56 57func (q *Queries) GetOrganization(ctx context.Context, id uuid.UUID) (Organization, error) { 58 row := q.db.QueryRow(ctx, getOrganization, id) 59 var i Organization 60 err := row.Scan( 61 &i.ID, 62 &i.Name, 63 &i.Slug, 64 &i.Status, 65 &i.CreatedAt, 66 &i.UpdatedAt, 67 ) 68 return i, err 69} 70 71const getUser = `-- name: GetUser :one 72SELECT id, organization_id, email, full_name, role, status, last_login_at, created_at, updated_at, mfa_enrolled FROM users WHERE id = $1 73` 74 75func (q *Queries) GetUser(ctx context.Context, id uuid.UUID) (User, error) { 76 row := q.db.QueryRow(ctx, getUser, id) 77 var i User 78 err := row.Scan( 79 &i.ID, 80 &i.OrganizationID, 81 &i.Email, 82 &i.FullName, 83 &i.Role, 84 &i.Status, 85 &i.LastLoginAt, 86 &i.CreatedAt, 87 &i.UpdatedAt, 88 &i.MfaEnrolled, 89 ) 90 return i, err 91} 92 93const getUserByEmail = `-- name: GetUserByEmail :one 94SELECT id, organization_id, email, full_name, role, status, last_login_at, created_at, updated_at, mfa_enrolled FROM users WHERE lower(email) = lower($1) 95` 96 97func (q *Queries) GetUserByEmail(ctx context.Context, lower string) (User, error) { 98 row := q.db.QueryRow(ctx, getUserByEmail, lower) 99 var i User 100 err := row.Scan( 101 &i.ID, 102 &i.OrganizationID, 103 &i.Email, 104 &i.FullName, 105 &i.Role, 106 &i.Status, 107 &i.LastLoginAt, 108 &i.CreatedAt, 109 &i.UpdatedAt, 110 &i.MfaEnrolled, 111 ) 112 return i, err 113} 114 115const insertAuditLog = `-- name: InsertAuditLog :one 116INSERT INTO audit_logs ( 117 organization_id, actor_user_id, action, entity_type, entity_id, 118 old_values, new_values, ip_address, user_agent 119) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9) 120RETURNING id, created_at 121` 122 123type InsertAuditLogParams struct { 124 OrganizationID *uuid.UUID `json:"organization_id"` 125 ActorUserID *uuid.UUID `json:"actor_user_id"` 126 Action string `json:"action"` 127 EntityType *string `json:"entity_type"` 128 EntityID *string `json:"entity_id"` 129 OldValues []byte `json:"old_values"` 130 NewValues []byte `json:"new_values"` 131 IpAddress *string `json:"ip_address"` 132 UserAgent *string `json:"user_agent"` 133} 134 135type InsertAuditLogRow struct { 136 ID int64 `json:"id"` 137 CreatedAt time.Time `json:"created_at"` 138} 139 140// audit_logs is append-only (enforced by trigger); only INSERT/SELECT are granted. 141func (q *Queries) InsertAuditLog(ctx context.Context, arg InsertAuditLogParams) (InsertAuditLogRow, error) { 142 row := q.db.QueryRow(ctx, insertAuditLog, 143 arg.OrganizationID, 144 arg.ActorUserID, 145 arg.Action, 146 arg.EntityType, 147 arg.EntityID, 148 arg.OldValues, 149 arg.NewValues, 150 arg.IpAddress, 151 arg.UserAgent, 152 ) 153 var i InsertAuditLogRow 154 err := row.Scan(&i.ID, &i.CreatedAt) 155 return i, err 156} 157 158const listAuditLogsForOrg = `-- name: ListAuditLogsForOrg :many 159SELECT id, organization_id, actor_user_id, action, entity_type, entity_id, old_values, new_values, ip_address, user_agent, created_at FROM audit_logs 160WHERE organization_id = NULLIF(current_setting('app.current_org_id', true), '')::uuid 161ORDER BY created_at DESC 162LIMIT $1 OFFSET $2 163` 164 165type ListAuditLogsForOrgParams struct { 166 Limit int32 `json:"limit"` 167 Offset int32 `json:"offset"` 168} 169 170// audit_logs has NO RLS policy by design. Bind the read to the validated session GUC (NOT a 171// caller supplied org param) so it inherits the same fail closed default deny as every RLS table, 172// a missing or wrong org can no longer leak another tenant's trail. Run inside RunInTenantTx so the GUC 173// is set [review AUDIT-2/RLS-3]. 174func (q *Queries) ListAuditLogsForOrg(ctx context.Context, arg ListAuditLogsForOrgParams) ([]AuditLog, error) { 175 rows, err := q.db.Query(ctx, listAuditLogsForOrg, arg.Limit, arg.Offset) 176 if err != nil { 177 return nil, err 178 } 179 defer rows.Close() 180 items := []AuditLog{} 181 for rows.Next() { 182 var i AuditLog 183 if err := rows.Scan( 184 &i.ID, 185 &i.OrganizationID, 186 &i.ActorUserID, 187 &i.Action, 188 &i.EntityType, 189 &i.EntityID, 190 &i.OldValues, 191 &i.NewValues, 192 &i.IpAddress, 193 &i.UserAgent, 194 &i.CreatedAt, 195 ); err != nil { 196 return nil, err 197 } 198 items = append(items, i) 199 } 200 if err := rows.Err(); err != nil { 201 return nil, err 202 } 203 return items, nil 204} 205 206const listSystemAuditLogs = `-- name: ListSystemAuditLogs :many 207SELECT id, organization_id, actor_user_id, action, entity_type, entity_id, old_values, new_values, ip_address, user_agent, created_at FROM audit_logs 208WHERE organization_id IS NULL 209ORDER BY created_at DESC 210LIMIT $1 OFFSET $2 211` 212 213type ListSystemAuditLogsParams struct { 214 Limit int32 `json:"limit"` 215 Offset int32 `json:"offset"` 216} 217 218// Platform/security events with NO org (e.g. failed logins before org resolution). Privileged read 219// path only, never the per-tenant app path, so these events are not a black hole [review AUDIT-3]. 220func (q *Queries) ListSystemAuditLogs(ctx context.Context, arg ListSystemAuditLogsParams) ([]AuditLog, error) { 221 rows, err := q.db.Query(ctx, listSystemAuditLogs, arg.Limit, arg.Offset) 222 if err != nil { 223 return nil, err 224 } 225 defer rows.Close() 226 items := []AuditLog{} 227 for rows.Next() { 228 var i AuditLog 229 if err := rows.Scan( 230 &i.ID, 231 &i.OrganizationID, 232 &i.ActorUserID, 233 &i.Action, 234 &i.EntityType, 235 &i.EntityID, 236 &i.OldValues, 237 &i.NewValues, 238 &i.IpAddress, 239 &i.UserAgent, 240 &i.CreatedAt, 241 ); err != nil { 242 return nil, err 243 } 244 items = append(items, i) 245 } 246 if err := rows.Err(); err != nil { 247 return nil, err 248 } 249 return items, nil 250} 251 252const listUsers = `-- name: ListUsers :many 253SELECT id, organization_id, email, full_name, role, status, last_login_at, created_at, updated_at, mfa_enrolled FROM users ORDER BY created_at DESC LIMIT $1 OFFSET $2 254` 255 256type ListUsersParams struct { 257 Limit int32 `json:"limit"` 258 Offset int32 `json:"offset"` 259} 260 261func (q *Queries) ListUsers(ctx context.Context, arg ListUsersParams) ([]User, error) { 262 rows, err := q.db.Query(ctx, listUsers, arg.Limit, arg.Offset) 263 if err != nil { 264 return nil, err 265 } 266 defer rows.Close() 267 items := []User{} 268 for rows.Next() { 269 var i User 270 if err := rows.Scan( 271 &i.ID, 272 &i.OrganizationID, 273 &i.Email, 274 &i.FullName, 275 &i.Role, 276 &i.Status, 277 &i.LastLoginAt, 278 &i.CreatedAt, 279 &i.UpdatedAt, 280 &i.MfaEnrolled, 281 ); err != nil { 282 return nil, err 283 } 284 items = append(items, i) 285 } 286 if err := rows.Err(); err != nil { 287 return nil, err 288 } 289 return items, nil 290} 291 292const touchUserLogin = `-- name: TouchUserLogin :exec 293UPDATE users SET last_login_at = now(), updated_at = now() WHERE id = $1 294` 295 296func (q *Queries) TouchUserLogin(ctx context.Context, id uuid.UUID) error { 297 _, err := q.db.Exec(ctx, touchUserLogin, id) 298 return err 299} 300