Struct Store 

pub struct Store { /* private fields */ }

The SQLite database, and every query the server makes against it.

Implementations

impl Store

pub fn create_enrollment( &self, e: &NewEnrollment<'_>, max_pending: usize, max_per_address: usize, ) -> Result<Created>

Stores a pending enrolment, unless its code is in use by another one still waiting, max_pending are waiting already, or max_per_address from its address are.

pub fn poll_enrollment( &self, enrollment_id: &str, now: OffsetDateTime, interval: Duration, ) -> Result<Poll>

Answers a machine’s poll, and records when it asked.

A poll sooner than interval after the last one is told to slow down. A second of slack keeps a client that sleeps exactly the interval from being told so because its previous request spent a moment in flight.

pub fn approve_enrollment( &self, user_code: &str, device_id: &str, scope: &str, now: &str, expected_fingerprint: Option<&str>, ) -> Result<Decision<Device>>

Approves the enrolment waiting with user_code, making it device device_id. When expected_fingerprint is given, the code’s key must have exactly that fingerprint.

pub fn deny_enrollment( &self, user_code: &str, now: &str, ) -> Result<Decision<String>>

Denies the enrolment waiting with user_code, answering with the name it asked for.

pub fn pending_enrollment( &self, user_code: &str, now: &str, ) -> Result<Decision<Waiting>>

What the enrolment waiting with user_code asked for, judged the way approving it would be, so a lookup and the approval after it never disagree about whether the code is still good.

pub fn insert_device( &self, d: &NewDevice<'_>, max_for_key: Option<u32>, ) -> Result<Inserted>

Stores a device, unless an unrevoked one has its name or, when max_for_key is given, its authkey already has that many unrevoked devices. Both are checked under the lock the insert holds.

pub fn device(&self, id: &str) -> Result<Option<Device>>

One device, revoked or not.

pub fn devices(&self) -> Result<Vec<Device>>

Every device, newest first.

pub fn revoke_device(&self, id: &str, now: &str) -> Result<Option<Device>>

Revokes a device. Revoking one already revoked keeps the first time. None when there is no such device.

pub fn touch_device(&self, id: &str, now: &str) -> Result<()>

Records that a device was just seen.

pub fn insert_authkey(&self, k: &NewAuthkey<'_>) -> Result<Authkey>

Stores an authkey’s hash and details.

pub fn authkey_by_hash(&self, key_sha256: &str) -> Result<Option<Authkey>>

The authkey whose SHA-256 is key_sha256, in any state.

pub fn authkeys(&self) -> Result<Vec<Authkey>>

Every authkey, newest first.

pub fn revoke_authkey( &self, id: &str, now: &str, devices: bool, ) -> Result<Option<Authkey>>

Revokes an authkey, keeping the first time if it already was, and with devices every device it enrolled too; without it they are untouched. None when there is no such key.

pub fn sweep_devices( &self, idle_before: &str, expired_before: &str, ) -> Result<(usize, usize)>

Removes ephemeral devices last seen (or, never seen, created) before idle_before, and enrolments that expired before expired_before. Answers how many of each went.

impl Store

pub fn open(path: impl AsRef<Path>) -> Result<Self>

Opens (creating if needed) the database at path.

pub fn open_in_memory() -> Result<Self>

An in-memory database, for tests.

pub fn get( &self, project_key: &str, file_path: &str, ) -> Result<Option<Existing>>

Reads one row.

pub fn upsert( &self, project_key: &str, file_path: &str, content: &str, source_env: &str, updated_at: &str, ) -> Result<()>

Writes content, clearing any tombstone.

pub fn tombstone( &self, project_key: &str, file_path: &str, source_env: &str, updated_at: &str, ) -> Result<()>

Marks a file deleted while deliberately leaving its content in place: a mistaken delete stays recoverable at the database level, even though nothing in the app surfaces an undo yet. Store::list withholds the content so a pull can’t resurrect it.

pub fn list(&self, project_key: &str) -> Result<Vec<File>>

Every file for a project, tombstones included so a pulling client knows what to remove locally — but with the deleted content withheld.

pub fn last_sync_at(&self) -> Result<String>

The most recent write across all projects, for /health. Empty when nothing has ever been synced.

pub fn admin_stats(&self) -> Result<(Vec<ProjectStats>, AdminTotals)>

Aggregates per project for the admin page.

pub fn backup(&self, dir: impl AsRef<Path>, keep: usize) -> Result<PathBuf>

Writes a consistent snapshot via VACUUM INTO, which is safe against a live database — unlike copying the file — then prunes the oldest snapshots beyond keep.