Struct OwnershipService 

pub struct OwnershipService;

Ownership persistence and transfer helpers.

Implementations

impl OwnershipService

pub async fn pending_deletion_gate( valence_model: &str, bare_id: &str, v: &Valence, ) -> Result<(), Error>

Pending-deletion gate for Model::get: absent ownership row passes; lookup errors pass.

pub fn apply_pending_deletion_gate( valence_model: &str, bare_id: &str, status: OwnershipGateStatus, ) -> Result<(), Error>

Apply the pending-deletion gate from a pre-fetched OwnershipGateStatus (no I/O).

pub async fn fetch_record_with_ownership_gate( valence_model: &str, record_id: &str, v: &Valence, ) -> Result<RecordOwnershipBundle, Error>

Unified Model::get fetch: one compiled query for row + ownership gate status (cache-aware).

pub async fn fetch_record_with_ownership_gate_uncached( backend: &Arc<dyn DatabaseBackend>, table: &str, record_id: &str, valence_model: &str, _v: &Valence, ) -> Result<RecordOwnershipBundle, Error>

Single-trip backend fetch for row + ownership status (no read cache).

pub async fn check_privacy_with_bundled_gate<F>( privacy_fut: F, valence_model: &str, bare_id: &str, status: OwnershipGateStatus, ) -> Result<(), Error>

where F: Future<Output = Result<(), Error>>,

Privacy check plus pending-deletion gate using a bundled ownership status.

pub async fn check_privacy_with_pending_gate<F>( privacy_fut: F, valence_model: &str, bare_id: &str, v: &Valence, ) -> Result<(), Error>

where F: Future<Output = Result<(), Error>>,

Run check_read_privacy and the pending-deletion gate with identical semantics to the legacy sequential path: privacy deny first, then PendingDeletion over privacy allow.

impl OwnershipService

pub async fn get_ownership_json( valence_model: &str, record_id: &str, v: &Valence, ) -> Result<Option<Value>, Error>

Load ownership JSON for a row, if present.

pub async fn pending_deletion_bare_ids_subset( valence_model: &str, bare_record_ids: &[String], v: &Valence, ) -> Result<HashSet<String>, Error>

Subset of bare_record_ids that currently have status = pending_deletion in ownership.

pub async fn owner_data_summary( owner_id: &str, owner_type: &str, v: &Valence, ) -> Result<OwnerDataSummary, Error>

Roll up ownership sidecar rows for owner_id / owner_type across registered schemas.

pub async fn transfer_history( valence_model: &str, record_id: &str, v: &Valence, limit: u32, ) -> Result<Vec<Value>, Error>

Recent transfer rows for the ownership row of valence_model / record_id.

impl OwnershipService

pub async fn ensure_active_ownership( valence_model: &str, record_id: &str, owner: OwnerRef, v: &Valence, ) -> Result<(), Error>

Insert or replace the active ownership row for valence_model / record_id.

pub async fn mark_deleted_ownership( valence_model: &str, record_id: &str, v: &Valence, ) -> Result<(), Error>

Set ownership status to deleted after the physical row has been removed (audit trail).

pub async fn mark_pending_deletion( valence_model: &str, record_id: &str, v: &Valence, ) -> Result<(), Error>

Mark ownership as pending deletion (called before the row delete side-effects).

pub async fn transfer_ownership( valence_model: &str, record_id: &str, new_owner: OwnerRef, reason: Option<String>, v: &Valence, ) -> Result<(), Error>

Transfer ownership and append a history row.