Struct SystemContext 

pub struct SystemContext { /* private fields */ }

A context representing trusted in-process/server code (a procedure, a worker, a reconciliation job) rather than an end user.

Deliberately a distinct type from CratestackContext so that “this call runs as the system” is visible in a function signature and greppable, instead of being a boolean threaded through call sites the way db.model().unchecked().update(...) would have been. Borrow the inner context with SystemContext::context to hand it to the ORM (cool.model().update(id).run(system.context())), or consume it with SystemContext::into_context where an owned CratestackContext is required.

Implementations

impl SystemContext

pub fn for_service(service: impl Into<String>) -> SystemContext

A system context attributed to a named service. The name is recorded as both the service claim and (prefixed) the id claim, so it flows through unchanged into cratestack_sqlx::audit::actor_from_context — which reads principal.claims.id for AuditActor::id and the full claims map for AuditActor::claims — without any audit-path code needing to know a system caller is a distinct kind of caller. An audit row produced by a system write reads actor.id = "system:<service>", which is how design constraint #3 (auditability) is met: no new audit machinery, just a deliberately-shaped actor identity flowing through the existing one.

pub fn context(&self) -> &CratestackContext

Borrow the underlying context to pass to the query layer.

pub fn into_context(self) -> CratestackContext

Consume into the underlying context.

Note this is the only direction that exists: CratestackContext -> SystemContext has no constructor anywhere. That asymmetry is the whole security property this module provides.

Trait Implementations

impl AsRef<CratestackContext> for SystemContext

fn as_ref(&self) -> &CratestackContext

Converts this type into a shared reference of the (usually inferred) input type.

impl Clone for SystemContext

fn clone(&self) -> SystemContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SystemContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl PartialEq for SystemContext

fn eq(&self, other: &SystemContext) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SystemContext