Crate gatekeep_sqlx 

SQLx support for gatekeep query lowering and durable decision audit.

This crate lowers a gatekeep::ResidualPolicy into trusted SQL fragments that can be appended to a sqlx::QueryBuilder.

It also provides SqlxDecisionAuditRepository, an async gatekeep::AuditSink implementation for Postgres, SQLite, and MySQL. Run the matching migration under migrations/{postgres,sqlite,mysql}, construct the backend repository alias such as PgDecisionAuditRepository, and pass it to gatekeep_axum::Gatekeeper::with_audit_sink.

Decision audit rows are stored with structured child rows for consulted facts, obligations, request subjects, and denial reason parameters. Each recorded decision also writes a gatekeep_audit_outbox row for downstream export workers.

Structs

DecisionAuditRecord

Persisted decision audit entry.

NoGradeProjection

Projection that rejects grade lowering.

OrdinalProjection

Outcome projection backed by SqlOutcome.

PostgresBackend

Postgres backend marker.

SqlxDecisionAuditRepository

SQLx-backed decision audit repository.

SqlxFragment

Trusted SQL plus ordered bind values for one SQLx backend.

SqlxLowerer

SQLx lowerer for gatekeep residual policies.

Enums

SqlxAuditError

SQLx audit repository errors.

SqlxDriver

Supported SQLx database driver.

SqlxDriverError

Database driver configuration error.

SqlxValue

Scalar value carried by a lowered SQL fragment.

Traits

GatekeepSqlxBackend

SQLx backend supported by gatekeep lowering.

OutcomeProjection

Projection strategy for turning outcomes into SQL fragments.

PgFactPredicates

Maps a residual fact to a trusted Postgres predicate over the candidate row.

SqlOutcome

Maps a policy outcome to a total-order SQL ordinal.

SqlxAuditStore

SQLx-side decision audit contract.

SqlxFactPredicates

Maps a residual fact to a trusted predicate over the candidate row.

Functions

infer_enabled_driver_from_url

Infers the SQLx driver from a database URL or SQLx-style SQLite memory URL.

validate_database_url_for_backend

Validates that a database URL matches a selected backend.

Type Aliases

PgDecisionAuditRepository

Postgres-backed decision audit repository.

PgFragment

Trusted Postgres SQL plus ordered bind values.

PgLowerer

Postgres lowerer for gatekeep residual policies.

PgValue

Postgres scalar value carried by a lowered SQL fragment.