feat(db/m7-user-mgmt): migration 0022 + audit helper

Schema for user management U1: display_name on users; user_invites;
registration_settings singleton (default 'invite_only'); audit_log.
Plus the internal/audit package centralizing the action-name
vocabulary and JSON metadata marshaling so handlers don't repeat
boilerplate.

Race-safe first-admin uses a query-shape primitive
(CreateUserFirstAdminRace's WHERE NOT EXISTS subquery) rather than
a schema-level constraint. Concurrent empty-state registrations
both see 'no users yet' and both insert as admin — fine, having
two admins from the start is benign; what matters is at-least-one.
users.username uniqueness arbitrates if the two callers picked the
same username.

CreateUser signature gains display_name (nullable); existing
bootstrap call sites pass nil. The audit package declares the full
U1+U2+U3 action vocabulary upfront so subsequent slices are purely
additive on the caller side.

Tests cover audit Write with + without metadata and that every
declared action constant persists correctly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

This commit is contained in:

Bryan Van Deusen

2026-05-07 11:51:00 -04:00

parent e48d84cde1

commit 4845628ae4

14 changed files with 693 additions and 8 deletions

									
										internal/db/queries/audit_log.sql
									
		+8
		
												View File
												
				@@ -0,0 +1,8 @@

				-- name: WriteAuditLog :exec

				INSERT INTO audit_log (actor_id, target_id, action, metadata)

				VALUES ($1, $2, $3, $4);

				-- name: ListAuditLog :many

				SELECT * FROM audit_log

				 ORDER BY created_at DESC

				 LIMIT $1 OFFSET $2;