systemprompt-users 0.64.0

User management for systemprompt.io AI governance infrastructure. 6-tier RBAC, sessions, IP bans, and role-scoped access control for the MCP governance pipeline.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

//! Database access layer for the users domain.
//!
//! [`UserRepository`] holds the read and write pools and implements user CRUD,
//! sessions, and federated identity across the `user` submodule; the API-key,
//! device-cert, banned-IP, rate-limit-bucket and session repositories live
//! alongside it. Mutating
//! operations take typed parameter structs ([`UpdateUserParams`],
//! [`CreateApiKeyParams`], [`EnrollDeviceCertParams`], [`BanIpParams`]).
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

mod api_key;
mod banned_ip;
mod device_cert;
mod federated_identity;
mod rate_limit_bucket;
mod role_directory;
mod session;
mod user;

pub use api_key::CreateApiKeyParams;
pub use banned_ip::{
    BanDuration, BanIpParams, BanIpWithMetadataParams, BannedIp, BannedIpRepository,
};
pub use device_cert::EnrollDeviceCertParams;
pub use rate_limit_bucket::UserRateLimitBucketRepository;
pub use role_directory::UsersRoleDirectory;
pub use session::SessionRepository;
pub use user::{
    ArchiveOutcome, ArchiveParams, ArchiveState, MERGE_EXCLUDED_SECURITY_TABLES, MergeResult,
    PurgeCount, UpdateUserParams,
};

use sqlx::PgPool;
use std::sync::Arc;
use systemprompt_database::DbPool;

const MAX_PAGE_SIZE: i64 = 100;

#[derive(Debug, Clone)]
pub struct UserRepository {
    pool: Arc<PgPool>,
    write_pool: Arc<PgPool>,
}

impl UserRepository {
    pub fn new(db: &DbPool) -> Self {
        let pool = db.pool();
        let write_pool = db.write_pool();
        Self { pool, write_pool }
    }
}