feat(store): add append-only login_events table with forced RLS

Stage-0 usage measurement (VISION/ADR-016): summary_actions captures acts
(watch/skip/save) but not reads. A reader who logs in weekly and clicks
nothing is invisible — for a reading product that return is the signal the
gate ("usage in >=2 distinct weeks") is defined on. login_events records
THAT a user was active, append-only, one row per user per active day.

Per-user isolation via the same GUC-keyed FORCE RLS policy as migration 003.
No FK to users (mirrors summary_actions) — the cascade footgun is handled by
DeleteUser in a later commit. Adds an up/down reversibility test and registers
the table in both truncate helpers.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

This commit is contained in:

mathias

2026-06-03 23:46:03 +02:00

co-authored by

Claude Opus 4.8

parent 99743af182

commit b070347597

5 changed files with 100 additions and 2 deletions

									
										internal/adapters/store/migrations/010_login_events.down.sql
									
		+4
		
												View File
												
				@@ -0,0 +1,4 @@

				DROP POLICY IF EXISTS login_events_isolation ON login_events;

				ALTER TABLE login_events NO FORCE ROW LEVEL SECURITY;

				ALTER TABLE login_events DISABLE ROW LEVEL SECURITY;

				DROP TABLE IF EXISTS login_events;