Struct SqlxLowerer 

pub struct SqlxLowerer<B, P, M = OrdinalProjection> { /* private fields */ }

SQLx lowerer for gatekeep residual policies.

Implementations

impl<B, P> SqlxLowerer<B, P, OrdinalProjection>

where B: GatekeepSqlxBackend,

pub fn new(predicates: P, tenant_column: TenantColumn) -> Self

Builds a lowerer using ordinal grade projection.

impl<B, P, M> SqlxLowerer<B, P, M>

where B: GatekeepSqlxBackend,

pub fn with_projection( predicates: P, projection: M, tenant_column: TenantColumn, ) -> Self

Builds a lowerer using a caller-supplied projection strategy.

pub fn unmapped_facts<O>( &self, residual: &ResidualPolicy<O>, cx: &Context, ) -> Vec<FactId>

where P: SqlxFactPredicates<B>,

Lists all query-deferred facts without a trusted SQL mapping. Request facts already resolved by partial evaluation are not reported.

pub fn lower_result<O>( &self, result: &Residual<O>, cx: &Context, ) -> Result<Lowered<SqlxFragment<B>, SqlxFragment<B>>, LowerError>

where P: SqlxFactPredicates<B>, M: OutcomeProjection<B, O>,

Lowers a partial-evaluation result with tenant guards on filter and grade.

Both resolved and pending policies use this path. Apply the filter before counting or paginating. SQL lowering does not produce per-row audit traces.

Errors

Returns missing-mapping or non-total-grade errors. Obligations remain application-owned prerequisites; a SQL projection does not execute them.

pub fn lower_filter<O>( &self, residual: &ResidualPolicy<O>, cx: &Context, ) -> Result<SqlxFragment<B>, LowerError>

where P: SqlxFactPredicates<B>,

Lowers only the Boolean filter. This works for every outcome lattice.

Errors

Returns LowerError::Unlowerable when a residual fact has no trusted predicate mapping.

pub fn enforce_tenant_filter( &self, policy: SqlxFragment<B>, cx: &Context, ) -> SqlxFragment<B>

Adds the mandatory typed tenant predicate to an already-built filter.

lower and lower_filter call this automatically. This method is public for applications that have already resolved a policy in memory and need to combine its constant filter with the same tenant safety contract.

pub fn enforce_tenant_projection( &self, grade: SqlxFragment<B>, cx: &Context, ) -> SqlxFragment<B>

Adds the mandatory tenant guard to a manually constructed grade projection. Callers that consume a gatekeep::Lowered from an in-memory resolved branch must apply this before selecting the grade; Self::lower applies it automatically.

Trait Implementations

impl<B: Clone, P: Clone, M: Clone> Clone for SqlxLowerer<B, P, M>

fn clone(&self) -> SqlxLowerer<B, P, M>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<B: Debug, P: Debug, M: Debug> Debug for SqlxLowerer<B, P, M>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<O, B, P, M> QueryLowering<O> for SqlxLowerer<B, P, M>

where B: GatekeepSqlxBackend, P: SqlxFactPredicates<B>, M: OutcomeProjection<B, O>,

type Filter = SqlxFragment<B>

Backend-specific boolean filter type.

type Projection = SqlxFragment<B>

Backend-specific grade projection type.

fn lower( &self, residual: &ResidualPolicy<O>, cx: &Context, ) -> Result<Lowered<Self::Filter, Self::Projection>, LowerError>

Lowers a residual policy for an authorized-list query.