Method ExportUserData

internal/identity/user_data_rights.go:114–189

@name UsageEventEntry ExportUserData gathers everything a user owns into a single struct for the right-of-access flow. Reads run inside a REPEATABLE READ transaction so the snapshot is internally consistent even if writes arrive while the export is being assembled.

(ctx context.Context, userID string)

// transaction so the snapshot is internally consistent even if writes
// arrive while the export is being assembled.
func (s *Store) ExportUserData(ctx context.Context, userID string) (*UserExport, error) {
	tx, err := s.pool.BeginTx(ctx, pgx.TxOptions{IsoLevel: pgx.RepeatableRead, AccessMode: pgx.ReadOnly})
	if err != nil {
		return nil, fmt.Errorf("export: begin tx: %w", err)
	}
	defer tx.Rollback(ctx)

	// Profile
	var u UserExportUser
	err = tx.QueryRow(ctx,
		`SELECT id, email, name, created_at FROM users WHERE id = $1`, userID,
	).Scan(&u.ID, &u.Email, &u.Name, &u.CreatedAt)
	if err != nil {
		return nil, fmt.Errorf("export: load user: %w", err)
	}

	// Domains
	domains, err := scanDomainsForUser(ctx, tx, userID)
	if err != nil {
		return nil, fmt.Errorf("export: load domains: %w", err)
	}

	// Agents
	agents, err := scanAgentsForUser(ctx, tx, userID)
	if err != nil {
		return nil, fmt.Errorf("export: load agents: %w", err)
	}

	// API keys (metadata only)
	keys, err := scanAPIKeysForUser(ctx, tx, userID)
	if err != nil {
		return nil, fmt.Errorf("export: load api keys: %w", err)
	}

	// Messages — across all the user's agents in one query so the order
	// is consistent and pagination doesn't matter for the export.
	messages, err := scanMessagesForUser(ctx, tx, userID)
	if err != nil {
		return nil, fmt.Errorf("export: load messages: %w", err)
	}

	// Suppressions (recipient addresses the account suppressed)
	suppressions, err := scanSuppressionsForUser(ctx, tx, userID)
	if err != nil {
		return nil, fmt.Errorf("export: load suppressions: %w", err)
	}

	// Protection events (the screening audit log across the user's agents)
	protectionEvents, err := scanProtectionEventsForUser(ctx, tx, userID)
	if err != nil {
		return nil, fmt.Errorf("export: load protection events: %w", err)
	}

	// Usage events (only present if E2A_USAGE_TRACKING is on)
	events, err := scanUsageEventsForUser(ctx, tx, userID)
	if err != nil {
		return nil, fmt.Errorf("export: load usage events: %w", err)
	}