Struct ResourceQuery 

pub struct ResourceQuery<'a> {
    pub resource: &'a ResourceDefinition,
    pub pool: &'a PgPool,
}

Dynamic query executor for a resource defined by a ResourceDefinition.

Generates and executes parameterized SQL queries against a PgPool, returning results as ResourceRow (JSON objects).

SQL injection safety

All user-controllable input (filter values, search term, cursor, pagination offset/limit, insert/update body) is passed only as bound parameters via BindValue and query.bind(). Table and column names in the SQL string come solely from ResourceDefinition (trusted schema). Filter/sort field names are allow-listed (FilterSet::from_query_params, SortParam::parse). See db_integration tests test_sql_injection_* for verification.

Fields

resource: &'a ResourceDefinition

pool: &'a PgPool

Implementations

impl<'a> ResourceQuery<'a>

pub fn new(resource: &'a ResourceDefinition, pool: &'a PgPool) -> Self

pub async fn find_by_id(&self, id: &Uuid) -> Result<ResourceRow, ShaperailError>

Find a single record by its primary key.

pub async fn find_all( &self, filters: &FilterSet, search: Option<&SearchParam>, sort: &SortParam, page: &PageRequest, ) -> Result<(Vec<ResourceRow>, Value), ShaperailError>

Find all records with filtering, searching, sorting, and pagination.

Returns (rows, cursor_page) for cursor pagination or (rows, offset_page) for offset.

pub async fn insert( &self, data: &Map<String, Value>, ) -> Result<ResourceRow, ShaperailError>

Insert a new record. Returns the inserted row.

pub async fn update_by_id( &self, id: &Uuid, data: &Map<String, Value>, ) -> Result<ResourceRow, ShaperailError>

Update a record by primary key. Returns the updated row.

pub async fn soft_delete_by_id( &self, id: &Uuid, ) -> Result<ResourceRow, ShaperailError>

Soft-delete a record by setting deleted_at to now.

pub async fn hard_delete_by_id( &self, id: &Uuid, ) -> Result<ResourceRow, ShaperailError>

Hard-delete a record permanently.