bvandeusen
4845628ae4
Schema for user management U1: display_name on users; user_invites; registration_settings singleton (default 'invite_only'); audit_log. Plus the internal/audit package centralizing the action-name vocabulary and JSON metadata marshaling so handlers don't repeat boilerplate. Race-safe first-admin uses a query-shape primitive (CreateUserFirstAdminRace's WHERE NOT EXISTS subquery) rather than a schema-level constraint. Concurrent empty-state registrations both see 'no users yet' and both insert as admin — fine, having two admins from the start is benign; what matters is at-least-one. users.username uniqueness arbitrates if the two callers picked the same username. CreateUser signature gains display_name (nullable); existing bootstrap call sites pass nil. The audit package declares the full U1+U2+U3 action vocabulary upfront so subsequent slices are purely additive on the caller side. Tests cover audit Write with + without metadata and that every declared action constant persists correctly. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
36 lines
1.1 KiB
SQL
36 lines
1.1 KiB
SQL
-- name: CreateInvite :one
|
|
INSERT INTO user_invites (token, invited_by, note, expires_at)
|
|
VALUES ($1, $2, $3, $4)
|
|
RETURNING *;
|
|
|
|
-- name: GetInviteByToken :one
|
|
SELECT * FROM user_invites WHERE token = $1;
|
|
|
|
-- name: ListInvitesActive :many
|
|
-- Active = not redeemed and not expired. Used by the admin invites
|
|
-- panel as the primary list.
|
|
SELECT * FROM user_invites
|
|
WHERE redeemed_at IS NULL AND expires_at > now()
|
|
ORDER BY created_at DESC;
|
|
|
|
-- name: ListInvitesAll :many
|
|
-- Includes redeemed + expired for full audit visibility. Caller
|
|
-- supplies a LIMIT to bound the response.
|
|
SELECT * FROM user_invites
|
|
ORDER BY created_at DESC
|
|
LIMIT $1;
|
|
|
|
-- name: RedeemInvite :execrows
|
|
-- Atomic claim: returns rows-affected so the caller can detect
|
|
-- already-redeemed / expired tokens (rows=0) versus successful claim
|
|
-- (rows=1). Use this from the registration handler.
|
|
UPDATE user_invites
|
|
SET redeemed_at = now(), redeemed_by = $2
|
|
WHERE token = $1
|
|
AND redeemed_at IS NULL
|
|
AND expires_at > now();
|
|
|
|
-- name: DeleteInvite :exec
|
|
-- Admin-revoke. Only deletes unredeemed invites.
|
|
DELETE FROM user_invites WHERE token = $1 AND redeemed_at IS NULL;
|