Function scanProtectionEventsForUser

internal/identity/user_data_rights.go:213–235

scanProtectionEventsForUser loads the screening audit log across all the user's agents (metadata projection — see ProtectionEventExportEntry).

(ctx context.Context, tx pgx.Tx, userID string)

// scanProtectionEventsForUser loads the screening audit log across all the user's
// agents (metadata projection — see ProtectionEventExportEntry).
func scanProtectionEventsForUser(ctx context.Context, tx pgx.Tx, userID string) ([]ProtectionEventExportEntry, error) {
	rows, err := tx.Query(ctx,
		`SELECT pe.id, pe.message_id, pe.agent_id, pe.direction, pe.source, pe.reason,
		        pe.action, COALESCE(pe.subject_addr, ''), COALESCE(pe.detector, ''), pe.score, pe.created_at
		   FROM protection_events pe
		   JOIN agent_identities a ON a.id = pe.agent_id
		  WHERE a.user_id = $1
		  ORDER BY pe.created_at DESC`, userID)
	if err != nil {
		return nil, err
	}
	defer rows.Close()
	out := []ProtectionEventExportEntry{}
	for rows.Next() {
		var e ProtectionEventExportEntry
		if err := rows.Scan(&e.ID, &e.MessageID, &e.AgentID, &e.Direction, &e.Source, &e.Reason,
			&e.Action, &e.SubjectAddr, &e.Detector, &e.Score, &e.CreatedAt); err != nil {
			return nil, err
		}
		out = append(out, e)
	}
	return out, rows.Err()
}

// DeleteUserDataResult breaks out per-table row counts for audit logs.
// Operators receiving a deletion request often have to attest to what