Struct ApprovalCore 

pub struct ApprovalCore { /* private fields */ }

Channel-agnostic approval semantics over a shared HostState. Cheap to clone (just an Arc). One per adapter, or shared.

Implementations

impl ApprovalCore

pub fn new(host: Arc<HostState>) -> ApprovalCore

Build a core over the shared host state.

pub fn host(&self) -> &Arc<HostState>

The shared host this core resolves against (adapters that still need direct host access — e.g. the iMessage code-eviction sweep — borrow it here rather than holding a second Arc).

pub fn is_eligible_pending(approval: &HostApprovalRequest) -> bool

True iff approval is a pending, eligible row an in-process channel adapter can actually resolve. Three conditions, all required (MC-7 — unchanged from #403):

1. status == Pending — resolved rows stay in the map marked Resolved.
2. !action.starts_with("ws.method:") — exclude the v2-deferred blocking high-risk-method gate rows.
3. client_id.is_none() — SYSTEM-LEVEL rows only. A session-owned row (client_id: Some(...)) hits the cross-session fan-out branch and comes back still-Pending without resolving; the orchestrator is not a WS session and cannot own such a row, so it must never prompt for one.

pub async fn eligible_pending(&self) -> Vec<HostApprovalRequest>

Snapshot the host’s approvals and return only the eligible-pending ones. The shared eligible-pending query every adapter consumes (outbound prompt minting, disambiguation, code lookup).

pub async fn is_id_eligible_pending(&self, approval_id: &str) -> bool

Whether approval_id is currently an eligible-pending row. Used by an adapter to confirm a named code still maps to an actionable approval before resolving.

pub async fn resolve( &self, principal: &str, approval_id: &str, resolution: &str, ) -> ResolveOutcome

Resolve approval_id in-process via the UNTOUCHED HostState::resolve_approval first-writer-wins guard. The system-raised principal string is supplied by the calling adapter — it is NOT hardcoded here (each adapter passes its own transport principal; the literal lives in the adapter, never in this channel-free core).

Returns a ResolveOutcome so the adapter knows whether the row actually moved (evict its mapping only on ResolveOutcome::Resolved).

Trait Implementations

impl Clone for ApprovalCore

fn clone(&self) -> ApprovalCore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.