Struct SqliteApprovalStore 

pub struct SqliteApprovalStore { /* private fields */ }

SQLite-backed ApprovalStore.

Schema is created on open. Migrations are additive and idempotent via CREATE TABLE IF NOT EXISTS.

Implementations

impl SqliteApprovalStore

pub fn open(path: impl AsRef<Path>) -> Result<Self, ApprovalStoreError>

Open the store at the given path. Creates the parent directory if needed.

pub fn open_colocated_with_receipt_store( path: impl AsRef<Path>, ) -> Result<Self, ApprovalStoreError>

Open the store co-located behind a receipt store that created the shared sidecar file first. chio api protect keeps both stores in one SQLite file and opens the receipt store first, so the file already carries the receipt store’s provenance anchor and no approval table yet; this variant adopts that receipt-anchored file as its sibling. The default open stays strict so a standalone receipt database is never mistaken for an approval store outside the sidecar.

pub fn open_in_memory() -> Result<Self, ApprovalStoreError>

Open an in-memory store for tests.

Trait Implementations

impl ApprovalStore for SqliteApprovalStore

fn store_pending( &self, request: &ApprovalRequest, ) -> Result<(), ApprovalStoreError>

Persist a new pending request. Idempotent on approval_id: a second call with the same id returns without error as long as the stored payload matches.

fn get_pending( &self, id: &str, ) -> Result<Option<ApprovalRequest>, ApprovalStoreError>

Fetch a single pending approval by id.

fn list_pending( &self, filter: &ApprovalFilter, ) -> Result<Vec<ApprovalRequest>, ApprovalStoreError>

List all pending approvals matching the filter.

fn resolve( &self, id: &str, decision: &ApprovalDecision, ) -> Result<(), ApprovalStoreError>

Mark a pending approval as resolved. Returns ApprovalStoreError::AlreadyResolved if the request has already been resolved (double-resolve protection) and ApprovalStoreError::Replay if the bound token has already been consumed on a different request.

fn count_approved( &self, subject_id: &str, policy_id: &str, ) -> Result<u64, ApprovalStoreError>

Count approved calls for a given subject / grant pair. Used by Constraint::RequireApprovalAbove threshold accounting.

fn record_consumed( &self, token_id: &str, parameter_hash: &str, now: u64, ) -> Result<(), ApprovalStoreError>

Record that a token (by token_id and parameter_hash) has been consumed. Used to reject replays of the same approval token across a restart. Implementations may also call this from [resolve]; exposing it on the trait lets the kernel do the replay check before persisting the resolution, which matters when the store is backed by SQLite and wants to run the check inside the transaction.

fn is_consumed( &self, token_id: &str, parameter_hash: &str, ) -> Result<bool, ApprovalStoreError>

Returns true if the token has already been consumed.

fn get_resolution( &self, id: &str, ) -> Result<Option<ResolvedApproval>, ApprovalStoreError>

Fetch the resolution record for a previously resolved approval.

impl ThresholdApprovalCollectorStore for SqliteApprovalStore

fn create( &self, proposal: &ThresholdApprovalCollectorProposal, ) -> Result<(), ThresholdApprovalCollectorStoreError>

fn get( &self, proposal_id: &str, ) -> Result<Option<ThresholdApprovalCollectorProposal>, ThresholdApprovalCollectorStoreError>

fn append_token( &self, proposal_id: &str, expected_version: u64, token: &GovernedApprovalToken, replaced_token_id: Option<&str>, next_state: ThresholdApprovalCollectorState, updated_at: u64, ) -> Result<ThresholdApprovalCollectorProposal, ThresholdApprovalCollectorStoreError>

fn transition( &self, proposal_id: &str, expected_version: u64, next_state: ThresholdApprovalCollectorState, updated_at: u64, ) -> Result<ThresholdApprovalCollectorProposal, ThresholdApprovalCollectorStoreError>