Crate systemprompt_users 

systemprompt-users

User management for the systemprompt.io AI governance platform. The crate provides:

• 6-tier RBAC — typed UserRole and policy-aware promotion/demotion helpers in UserAdminService.
• Sessions — lifecycle management for browser, API, and anonymous sessions including bulk-end and recent-activity queries.
• API keys — issuance, hashing, and verification via ApiKeyService.
• Device certificates — enrollment and rotation via DeviceCertService.
• IP bans — typed BannedIpRepository with metadata-aware queries.
• Rate-limit buckets — UserRateLimitBucketRepository, the replica-shared counters behind the global per-user HTTP throttle.
• Cleanup job — purges anonymous users past the retention window.

Feature flags

Feature	Default	Effect
none	n/a	The crate exposes a single feature surface; all modules are compiled unconditionally. The [package.metadata.docs.rs] all-features = true setting is retained so future feature additions automatically appear in published docs.

Layering

systemprompt-users is a domain crate. It depends downward on systemprompt-database, systemprompt-extension, systemprompt-models, systemprompt-traits, systemprompt-provider-contracts, and systemprompt-identifiers.

Copyright (c) systemprompt.io — Business Source License 1.1. See https://systemprompt.io for licensing details.

Re-exports

pub use error::Result;

pub use error::UserError;

pub use error::UserResult;

Modules

error

Typed error surface for the users crate.

jobs

Background jobs for the users domain.

Structs

ApiKeyLimits

The limits an API key carries: an optional model allowlist, and a spend budget and request ceiling counted over request_window_seconds.

ApiKeyService

ArchiveOutcome

The credentials an archive revoked.

ArchiveParams

Who archives a user, why, and whether the archive is under legal hold.

ArchiveState

A user’s archive fields. archived_at is None for a row deleted before archiving existed, which is restorable but never purged automatically.

BanIpParams

BanIpWithMetadataParams

BannedIp

BannedIpRepository

CreateApiKeyParams

DeviceCertService

EnrollDeviceCertParams

EnrollDeviceCertServiceParams

IssueApiKeyParams

MergeResult

NewApiKey

PurgeCount

How many rows one purge table holds for a user.

SessionRepository

UpdateUserParams

User

UserActivity

UserAdminService

UserApiKey

UserCountBreakdown

UserDeviceCert

UserExport

UserRateLimitBucketRepository

UserRepository

UserService

UserSession

UserStats

UserWithSessions

UsersAiSessionProvider

UsersExtension

UsersRoleDirectory

Enums

BanDuration

DemoteResult

PromoteResult

UserRole

UserStatus

Constants

API_KEY_PREFIX

DEVICE_FINGERPRINT_FOREIGN_USER

MERGE_EXCLUDED_SECURITY_TABLES

Traits

RoleProvider

UserProvider

Functions

normalise_email