systemprompt-database 0.66.0

PostgreSQL infrastructure for systemprompt.io AI governance. SQLx-backed pool, generic repository traits, and compile-time query verification. Part of the systemprompt.io AI governance pipeline.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119

//! # systemprompt-database
//!
//! `PostgreSQL` infrastructure for systemprompt.io: a thin `SQLx`-backed pool,
//! generic repository traits, dynamic-query primitives for admin tooling, and
//! lifecycle helpers (schema installation, extension migrations, validation).
//!
//! ## Public API surface
//!
//! - [`Database`] / [`DbPool`] — owned pool wrapper with optional split
//!   read/write providers.
//! - [`DatabaseProvider`] — dyn-safe trait abstracting
//!   query/execute/transaction primitives across providers (currently only
//!   `PostgreSQL`).
//! - [`PostgresProvider`] — the `PostgreSQL` implementation.
//! - [`DatabaseResult`] — result alias over the workspace's single
//!   [`systemprompt_traits::RepositoryError`].
//! - [`MigrationService`], [`install_extension_schemas_full`] — lifecycle
//!   helpers driving extension-supplied DDL.
//! - [`DatabaseAdminService`], [`QueryExecutor`], [`AdminSql`],
//!   [`SafeIdentifier`] — admin/introspection layer used by the CLI.
//! - [`resilience`] — domain-agnostic resilience primitives
//!   ([`resilience::ResilienceGuard`], [`resilience::CircuitBreaker`],
//!   [`resilience::Bulkhead`], [`resilience::retry_async`]) wrapping outbound
//!   calls; the crate's own connection and transaction retries run on them.
//!
//! ## Feature flags
//!
//! This crate currently has no Cargo features; everything compiles
//! unconditionally. The `[package.metadata.docs.rs]` block is in place so
//! `--all-features` documentation builds remain stable as features are added.
//!
//! ## sqlx allowlist
//!
//! Static SQL goes through the compile-time-verified `sqlx::query!` /
//! `query_as!` / `query_scalar!` macros. Runtime/dynamic SQL is contained to
//! two paths whose contract is dynamic SQL by design; the `lint-sqlx` gate
//! allows runtime `sqlx::query` only there:
//!
//! - `src/admin/` — admin CLI surfaces (introspection, restricted query
//!   executor) where the SQL is the user input.
//! - `src/services/postgres/` — the dyn-safe `DatabaseProvider` implementation,
//!   transaction wrapper, type-erased helpers and `PostgreSQL` schema
//!   introspection.
//! - `src/projection/` — `drain_with_sql` calls the projector function the
//!   caller names (validated as a bare identifier); the name is the only
//!   dynamic part and no value is interpolated.
//!
//! Every other call site uses verified macros.
//!
//! ## Data paradigm
//!
//! [`projection`] documents the rule every analytics-shaped read follows:
//! store the answer when the row is written, read the stored answer. Raw
//! ledger tables are read by projectors and single-entity detail queries
//! only; the queue, drainer and backfill detector that make that hold live
//! there and in [`backfill_statements`].
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

pub mod admin;
pub mod error;
pub mod extension;
pub mod lifecycle;
pub mod models;
pub mod projection;
#[macro_use]
pub mod repository;
pub mod resilience;
pub mod services;

pub use extension::DatabaseExtension;

pub use models::{
    ColumnInfo, DatabaseInfo, DatabaseQuery, DatabaseTransaction, DbValue, FromDbValue, IndexInfo,
    JsonRow, QueryResult, QueryRow, QuerySelector, TableInfo, ToDbValue, parse_database_datetime,
};

pub use services::{
    BoxFuture, Database, DatabaseCliDisplay, DatabaseExt, DatabaseProvider, DbPool, PoolConfig,
    PostgresProvider, SqlExecutor, mark_schema_changed, with_transaction_retry,
};

pub use error::DatabaseResult;
pub use lifecycle::{
    AppliedMigration, BOOTSTRAP_ADVISORY_LOCK_KEY, BackfillStatement, BaselineStamp,
    BootstrapLockGuard, ChecksumDrift, DeferredForeignKey, ExpensiveStatement,
    ExtensionMigrationStatus, FkDeferralError, ForeignKeyDrift, FreshnessCheck, HOT_TABLES,
    MarkAppliedOutcome, MigrationConfig, MigrationCost, MigrationResult, MigrationService,
    MigrationStatus, OrphanMigrationLedger, OrphanedMigration, PROJECTION_BACKLOG,
    PendingMigration, RepairResult, ReplicaStatus, SchemaCurrency, SchemaInstallReport,
    SchemaResidue, SlotCollision, SplitCreateTable, TombstonedSlot, UndeclaredTable,
    audit_migration_cost, audit_one, audit_schema_residue, backfill_statements,
    check_migration_references, check_trigger_routines, install_extension_schemas_full,
    is_retirement, replica_status, schema_currency, split_create_table_foreign_keys,
    validate_column_exists, validate_database_connection, validate_table_exists,
    validate_write_pool_is_primary,
};
pub use repository::{
    CreateServiceInput, INSTANCE_CLAIM_CLASS, InstanceClaim, InstanceClaimError, PgDbPool,
    ServiceConfig, ServiceModule, ServiceRepository, ServiceStatus, UpsertServiceProcessInput,
};

pub use admin::{
    AdminSql, AdminSqlError, DEFAULT_READONLY_ROW_LIMIT, DatabaseAdminService, IdentifierError,
    QueryExecutor, QueryExecutorError, SafeIdentifier,
};

use systemprompt_traits::DatabaseHandle;

impl DatabaseHandle for Database {
    fn is_connected(&self) -> bool {
        !self.pool().is_closed() && !self.write_pool().is_closed()
    }

    fn as_any(&self) -> &dyn std::any::Any {
        self
    }
}