Enum ReconciliationMode 

pub enum ReconciliationMode {
    Authoritative,
    Additive,
    Adopt,
}

Controls how aggressively pgroles converges the database to the manifest.

The diff engine always computes the full set of changes. The reconciliation mode acts as a post-filter on the resulting Vec<Change>, stripping out changes that the operator does not want applied.

Variants

Authoritative

Full convergence — the manifest is the entire truth.

All changes (creates, alters, grants, revokes, drops) are applied. Anything present in the database but absent from the manifest is revoked or dropped.

Additive

Only grant, never revoke — safe for incremental adoption.

Additive mode filters out all destructive changes:

• Revoke / RevokeDefaultPrivilege
• RemoveMember
• DropRole and its retirement steps (TerminateSessions, ReassignOwned, DropOwned)

Use this when onboarding pgroles into an existing environment where you want to guarantee that no existing access is removed.

Adopt

Manage declared resources fully, but never drop undeclared roles.

Adopt mode is identical to authoritative except that it filters out DropRole and associated retirement steps (TerminateSessions, ReassignOwned, DropOwned). Revokes within the managed scope are still applied.

Use this for brownfield onboarding where you want full privilege convergence for declared roles but don’t want pgroles to drop roles it doesn’t know about.

Trait Implementations

impl Clone for ReconciliationMode

fn clone(&self) -> ReconciliationMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ReconciliationMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ReconciliationMode

fn default() -> ReconciliationMode

Returns the “default value” for a type.

impl Display for ReconciliationMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for ReconciliationMode

fn eq(&self, other: &ReconciliationMode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ReconciliationMode

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for ReconciliationMode

impl Eq for ReconciliationMode

impl StructuralPartialEq for ReconciliationMode