Struct AppState 

pub struct AppState {
    pub registry: Arc<AnyRegistry>,
    pub admin_api_key: String,
    pub token_config: TokenConfig,
    pub session_store: AnySessionStore,
    pub policy_config: Arc<Sender<Arc<Option<PolicyConfig>>>>,
    pub audit_sink: Option<Arc<AuditSink>>,
    pub policy_file_path: Option<String>,
    pub warning_threshold_pct: f64,
    pub default_rate_limit_window_secs: u64,
    pub metrics: Arc<ArbiterMetrics>,
    pub max_concurrent_sessions_per_agent: Option<u64>,
    pub admin_rate_limiter: Arc<AdminRateLimiter>,
}

Shared application state for the lifecycle API.

Fields

registry: Arc<AnyRegistry>

admin_api_key: String

token_config: TokenConfig

session_store: AnySessionStore

policy_config: Arc<Sender<Arc<Option<PolicyConfig>>>>

audit_sink: Option<Arc<AuditSink>>

Audit sink for querying per-session stats on close.

policy_file_path: Option<String>

Path to the policy TOML file (for hot-reload).

warning_threshold_pct: f64

Percentage threshold for session budget/time warnings.

default_rate_limit_window_secs: u64

Default rate-limit window duration in seconds for new sessions.

metrics: Arc<ArbiterMetrics>

Shared metrics for gauge updates (active_sessions, registered_agents).

max_concurrent_sessions_per_agent: Option<u64>

Maximum concurrent active sessions per agent (None = no limit). P0: Per-agent session cap to prevent session multiplication attacks.

admin_rate_limiter: Arc<AdminRateLimiter>

Rate limiter for admin API endpoints. Shared via Arc so the Clone-based axum state sharing works correctly.

Implementations

impl AppState

pub fn new(admin_api_key: String) -> Self

Create a new application state with the given admin API key.

pub fn with_token_config( admin_api_key: String, token_config: TokenConfig, ) -> Self

Create a new application state with custom token config.

pub fn with_admin_rate_limit(self, max_requests_per_minute: u64) -> Self

Create a rate limiter with a custom max requests per minute.

pub fn admin_audit_log( &self, operation: &str, agent_id: Option<Uuid>, detail: &str, )

Log an admin API operation with structured fields for audit trail.

All admin operations are now logged at info level with structured tracing fields for observability and forensic analysis.

Trait Implementations

impl Clone for AppState

fn clone(&self) -> AppState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.