Enum Plane 

pub enum Plane {
    Both,
    Data,
    Credential,
}

Build the data-plane router (/v1/*), with EdgeState baked in.

This is the reusable half: the self-host binary adds its own health routes around it (see crate::run); the hosted gateway merges it under its auth + metering middleware alongside its control-plane routes. It deliberately does NOT register /health/*, so a host app can own health without colliding.

What this router does NOT include

No transport-level protection is attached here — not the request-body cap, the request timeout, the credential-header redaction, or tracing. An embedder must apply them, and crate::harden does exactly that.

The body cap is the one most easily missed: crate::EdgeConfig exposes max_body_bytes as a validated knob, which makes it reasonable to assume the router already honours it. It does not. Which planes a given process serves.

One binary, deployed twice. The data plane carries every tenant’s memory traffic; the credential plane is the only place a plaintext provider key exists in memory, and it sits on the LLM path with a completely different latency profile.

Running both in one process is supported, and is the default — standing up two deployments just to try BYOK would be absurd. Production should split them: it keeps every tenant’s keys out of the busiest process and lets the two scale on their own shapes.

Variants

Both

Memory verbs plus credentials and the broker. The default.

Data

Memory verbs only. No key material is reachable in this process.

Credential

BYOK credential management and the broker only.

Implementations

impl Plane

pub fn from_name(name: &str) -> Result<Self, String>

Parse a PLANE_ENV value.

Errors

Names the accepted set. An unrecognised plane is a hard error rather than a silent fallback to Both: quietly serving credentials from a process an operator meant to be data-only is the exact mistake this flag exists to prevent.

pub fn from_env() -> Result<Self, String>

Read the plane from the environment.

Errors

As Self::from_name.

pub const fn serves_data(self) -> bool

Whether this plane serves the memory verbs.

pub const fn serves_credentials(self) -> bool

Whether this plane serves credentials and the broker.

Trait Implementations

impl Clone for Plane

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Plane

impl Debug for Plane

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Plane

fn default() -> Self

Returns the “default value” for a type.

impl Eq for Plane

impl PartialEq for Plane

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Plane