refactor(server): use protos for stored policy records

Author: johntmyers

crates/openshell-server/src/persistence/mod.rs

@@ -6,6 +6,10 @@
 mod postgres;
 mod sqlite;
 
+pub use openshell_core::proto::{
+    StoredDraftChunk as DraftChunkRecord, StoredPolicyRevision as PolicyRecord,
+};
+
 use openshell_core::{
     Error as CoreError, Result as CoreResult,
     proto::{
@@ -81,48 +85,6 @@ pub struct ObjectRecord {
     pub labels: Option<String>,
 }
 
-/// Stored sandbox policy revision record.
-#[derive(Debug, Clone)]
-pub struct PolicyRecord {
-    pub id: String,
-    pub sandbox_id: String,
-    pub version: i64,
-    pub policy_payload: Vec<u8>,
-    pub policy_hash: String,
-    pub status: String,
-    pub load_error: Option<String>,
-    pub created_at_ms: i64,
-    pub loaded_at_ms: Option<i64>,
-}
-
-/// Stored draft policy chunk record.
-#[derive(Debug, Clone)]
-pub struct DraftChunkRecord {
-    pub id: String,
-    pub sandbox_id: String,
-    pub draft_version: i64,
-    pub status: String,
-    pub rule_name: String,
-    pub proposed_rule: Vec<u8>,
-    pub rationale: String,
-    pub security_notes: String,
-    pub confidence: f64,
-    pub created_at_ms: i64,
-    pub decided_at_ms: Option<i64>,
-    /// Denormalized endpoint host (lowercase) for DB-level dedup.
-    pub host: String,
-    /// Denormalized endpoint port for DB-level dedup.
-    pub port: i32,
-    /// Binary path that triggered the denial (for per-binary dedup).
-    pub binary: String,
-    /// How many times this endpoint has been seen across denial flush cycles.
-    pub hit_count: i32,
-    /// First time this endpoint was proposed (ms since epoch).
-    pub first_seen_ms: i64,
-    /// Most recent time this endpoint was re-proposed (ms since epoch).
-    pub last_seen_ms: i64,
-}
-
 /// Persistence store implementations.
 #[derive(Debug, Clone)]
 pub enum Store {

proto/openshell.proto

@@ -1172,3 +1172,37 @@ message DraftChunkPayload {
   // Current draft version for the owning sandbox.
   int64 draft_version = 10;
 }
+
+// Internal stored policy revision row materialized from the generic objects table.
+message StoredPolicyRevision {
+  string id = 1;
+  string sandbox_id = 2;
+  int64 version = 3;
+  bytes policy_payload = 4;
+  string policy_hash = 5;
+  string status = 6;
+  optional string load_error = 7;
+  int64 created_at_ms = 8;
+  optional int64 loaded_at_ms = 9;
+}
+
+// Internal stored draft chunk row materialized from the generic objects table.
+message StoredDraftChunk {
+  string id = 1;
+  string sandbox_id = 2;
+  int64 draft_version = 3;
+  string status = 4;
+  string rule_name = 5;
+  bytes proposed_rule = 6;
+  string rationale = 7;
+  string security_notes = 8;
+  double confidence = 9;
+  int64 created_at_ms = 10;
+  optional int64 decided_at_ms = 11;
+  string host = 12;
+  int32 port = 13;
+  string binary = 14;
+  int32 hit_count = 15;
+  int64 first_seen_ms = 16;
+  int64 last_seen_ms = 17;
+}