Crate appcore_gateway 

Multi-tenant Gateway capability for the AppCore Runtime.

Re-exports

pub use authorization::client_connection_hash;

pub use authorization::gateway_token_claims;

pub use authorization::worker_connection_hash;

pub use authorization::GATEWAY_CONNECTION_TOKEN_TTL_MS;

pub use capability::gateway_capability_descriptor;

pub use capability::GatewayCapability;

pub use capability::GATEWAY_RUNTIME_CAPABILITY;

pub use config::GatewayConfig;

pub use config::GATEWAY_ADAPTER_NAME;

pub use config::GATEWAY_PROVIDER_ID;

pub use config::MAX_GATEWAY_AFFINITY_KEY_BYTES;

pub use config::MAX_GATEWAY_WORKER_INFLIGHT;

pub use connection::ClientConnection;

pub use connection::WorkerConnection;

pub use connection::WorkerConnectionKey;

pub use diagnostics::GatewayCapabilitySnapshot;

pub use diagnostics::GatewayDiagnosticsQuery;

pub use diagnostics::GatewayDiagnosticsSnapshot;

pub use diagnostics::GatewayPeerSnapshot;

pub use error::GatewayError;

pub use error::GatewayResult;

pub use federation::GatewayFederationRequestV2;

pub use federation::GatewayFederationResponseV2;

pub use federation::GATEWAY_FEDERATION_PATH_V2;

pub use federation::GATEWAY_FEDERATION_SCHEMA_V2;

pub use ha::GatewayFederationUrl;

pub use ha::GatewayHaCoordinator;

pub use ha::GatewayHaCoordinatorConfig;

pub use ha::GatewayHaCoordinatorSnapshot;

pub use ha::GatewayHaLifecycle;

pub use ha::GatewayHaLifecycleSnapshot;

pub use ha::GatewayHaMode;

pub use ha::GatewayHaOwnershipSnapshot;

pub use ha::GatewayHaOwnershipSource;

pub use ha::GatewayHaSessionSnapshot;

pub use ha::GatewayHaTenantBinding;

pub use ha::GatewayHaWorkerSnapshot;

pub use ha::GatewayInstanceLease;

pub use ha::GatewayLocalRequestClaim;

pub use ha::GatewayRegistryError;

pub use ha::GatewayRegistryFuture;

pub use ha::GatewayRegistryProvider;

pub use ha::GatewayRegistryResult;

pub use ha::GatewayRequestFence;

pub use ha::GatewaySessionRecord;

pub use ha::GatewayWorkerRecord;

pub use ha::GatewayWorkerRegistration;

pub use ha::MAX_GATEWAY_INSTANCE_LEASE_TTL_MS;

pub use ha::MAX_GATEWAY_REGISTRY_CONCURRENCY;

pub use ha::MAX_GATEWAY_RESOLVE_CANDIDATES;

pub use heartbeat::spawn_heartbeat_pruner;

pub use mesh::MeshPeerRequest;

pub use mesh::MeshPeerResponse;

pub use mesh::MeshPeerTransport;

pub use mesh::MESH_HTTP_SCHEMA_V1;

pub use mesh::MESH_PEER_RELAY_PATH;

pub use metrics::GatewayMetrics;

pub use registry::CapabilityRegistry;

pub use registry::CapabilityRegistryStats;

pub use resolver::CapabilityResolver;

pub use resolver::SelectionPolicy;

pub use resolver::WorkerSelectionError;

pub use resolver::WorkerSelectionInput;

pub use resolver::WorkerSelectionPolicy;

pub use router::EnvelopeRouter;

pub use runtime::GatewayRuntime;

pub use runtime::GatewayRuntimeDetails;

pub use runtime::GatewayRuntimeSnapshot;

pub use runtime::GatewayRuntimeState;

pub use service::make_gateway_router;

pub use session::GatewaySession;

pub use state::GatewayState;

pub use tenant::TenantState;

Modules

authorization

Gateway connection authorization bindings.

capability

Capability definitions inside the Gateway context.

config

Gateway configuration definitions.

connection

Connection descriptors for workers and clients.

diagnostics

Bounded, payload-free Gateway peer and capability introspection.

error

Gateway-scoped error types.

federation

Explicit authenticated Gateway-to-Gateway federation wire contract.

ha

Opt-in Gateway HA registry contracts.

heartbeat

Heartbeat monitoring and worker pruning.

mesh

Mesh relay transport for Peer RPC over the Gateway.

metrics

Lightweight observability metrics for Gateway health and throughput.

registry

Capability advertisement registry.

resolver

Deterministic tenant-local capability worker selection.

router

Multiplexing router for Peer RPC envelopes.

runtime

Owned listener, task, health, and shutdown lifecycle for one Gateway.

service

Axum HTTP and WebSocket routing service implementation.

session

Session management and token context tracking.

socket

Bounded Gateway worker and client WebSocket loops.

state

Shared central Gateway state.

tenant

Tenant-isolated state partition.

Structs

GatewayCapabilityTelemetrySnapshot

Immutable telemetry for one bounded capability label.

GatewayTelemetryExportError

Controlled failure returned by a deployment-owned telemetry exporter.

GatewayTelemetrySnapshot

Immutable process-wide Gateway telemetry snapshot.

OpaqueContentEnvelopeV1

Gateway/sync transport metadata for an opaque encrypted content envelope.

OpaqueEnvelopeDeduplicator

Bounded in-memory deduplicator keyed by opaque message ID.

OpaqueEnvelopePolicy

Transport policy for opaque content envelopes.

Enums

OpaqueEnvelopeDecision

Result of opaque transport validation.

Constants

GATEWAY_FEDERATION_TOKEN_TTL_MS

Maximum lifetime accepted for a Gateway federation credential.

MAX_GATEWAY_TELEMETRY_CAPABILITIES

Maximum distinct capability series retained by one Gateway process.

OPAQUE_CONTENT_ENVELOPE_SCHEMA_V1

Schema label for the first opaque content-envelope transport contract.

Traits

GatewayTelemetryExporter

Vendor-neutral adapter invoked explicitly with an owned bounded snapshot.

Functions

gateway_federation_token_claims

Returns the isolated cryptographic claims domain for federation V2.

Type Aliases

SharedTenantState

Independently synchronized state owned by one Gateway tenant partition.