Module datastore_creation 

PostgreSQL-owned mechanics for starting a configured Datastore creation saga.

Structs

PgDatastoreCreationConnection

Explicit PostgreSQL authority used for one configured creation attempt.

PgDatastoreCreationSpec

PostgreSQL names and initial binding required for a new Datastore.

PgDatastoreReconciliationError

Closed adapter failure for retained-state inspection and reconciliation.

PgDatastoreValidationSpec

Expected PostgreSQL ownership and privilege boundary for one retained Datastore.

PgPendingDatastoreCreation

PostgreSQL capabilities retained while a creation saga is in progress.

Enums

PgDatastoreCreationStart

Closed start result that distinguishes failures with a durable binding.

PgDatastoreCredentialRotationError

Disclosure-safe failure from the PostgreSQL-owned credential authority.

Functions

apply_datastore_credential_rotation

begin_datastore_creation

Creates the target database and immediately records its creating binding, then performs the remaining PostgreSQL side effects under the same advisory lock. Failures after the binding is durable return the pending capability so the caller can atomically mark the saga failed.

find_existing_datastore_binding

Finds the singleton identity binding in an existing target database without adopting an unbound or ambiguously bound database.

inspect_datastore_identity_bindings

Inspects every connectable database on one configured PostgreSQL server. Any database that cannot be inspected makes absence unprovable.

rollback_datastore_credential_rotation

validate_existing_datastore_postgresql

Verifies retained database/schema ownership, identifier limits, role attributes, memberships, approved service-function ownership, and PUBLIC privilege revocations.