Struct RequestEvaluator 

pub struct RequestEvaluator { /* private fields */ }

The request evaluator holds the loaded route table and shared HTTP authority.

Implementations

impl RequestEvaluator

pub fn new( routes: Vec<RouteEntry>, keypair: Keypair, policy_hash: String, ) -> Self

👎Deprecated:

renamed to new_ephemeral: this keeps the receipt log and revocation state in memory, lost on restart

Compatibility shim for the pre-rename constructor name. Renamed to RequestEvaluator::new_ephemeral so an embedder never gets in-memory audit state by mistake; kept so existing callers keep compiling.

pub fn new_with_trusted_capability_issuers( routes: Vec<RouteEntry>, keypair: Keypair, policy_hash: String, trusted_capability_issuers: Vec<PublicKey>, ) -> Self

👎Deprecated:

renamed to new_ephemeral_with_trusted_capability_issuers: this keeps the receipt log and revocation state in memory, lost on restart

Compatibility shim for the pre-rename constructor name; see RequestEvaluator::new_ephemeral_with_trusted_capability_issuers.

pub fn new_with_approval_store( routes: Vec<RouteEntry>, keypair: Keypair, policy_hash: String, approval_store: Arc<dyn ApprovalStore>, ) -> Self

👎Deprecated:

renamed to new_ephemeral_with_approval_store: this keeps the receipt log and revocation state in memory, lost on restart

Compatibility shim for the pre-rename constructor name; see RequestEvaluator::new_ephemeral_with_approval_store.

pub fn new_with_approval_store_and_trusted_capability_issuers( routes: Vec<RouteEntry>, keypair: Keypair, policy_hash: String, approval_store: Arc<dyn ApprovalStore>, trusted_capability_issuers: Vec<PublicKey>, ) -> Self

👎Deprecated:

renamed to new_ephemeral_with_approval_store_and_trusted_capability_issuers: this keeps the receipt log and revocation state in memory, lost on restart

Compatibility shim for the pre-rename constructor name; see RequestEvaluator::new_ephemeral_with_approval_store_and_trusted_capability_issuers.

pub fn new_ephemeral( routes: Vec<RouteEntry>, keypair: Keypair, policy_hash: String, ) -> Self

Build an evaluator whose embedded kernel keeps its receipt log and revocation state in memory; both are lost on restart. Ephemerality is opted into through the constructor name so an embedder never gets in-memory audit state by mistake. Durable-by-default construction goes through RequestEvaluator::new_with_durable_stores.

pub fn new_ephemeral_with_trusted_capability_issuers( routes: Vec<RouteEntry>, keypair: Keypair, policy_hash: String, trusted_capability_issuers: Vec<PublicKey>, ) -> Self

Ephemeral evaluator with additional trusted capability issuers; see RequestEvaluator::new_ephemeral.

pub fn new_ephemeral_with_approval_store( routes: Vec<RouteEntry>, keypair: Keypair, policy_hash: String, approval_store: Arc<dyn ApprovalStore>, ) -> Self

Ephemeral evaluator with a caller-provided approval store; see RequestEvaluator::new_ephemeral.

pub fn new_ephemeral_with_approval_store_and_trusted_capability_issuers( routes: Vec<RouteEntry>, keypair: Keypair, policy_hash: String, approval_store: Arc<dyn ApprovalStore>, trusted_capability_issuers: Vec<PublicKey>, ) -> Self

Ephemeral evaluator with a caller-provided approval store and additional trusted capability issuers; see RequestEvaluator::new_ephemeral.

pub fn new_with_durable_stores( routes: Vec<RouteEntry>, keypair: Keypair, policy_hash: String, approval_store: Arc<dyn ApprovalStore>, trusted_capability_issuers: Vec<PublicKey>, receipt_store: Option<Arc<dyn ReceiptStore>>, revocation_store: Option<Arc<dyn RevocationStore>>, allow_ephemeral: bool, ) -> Result<Self, HttpAuthorityError>

Build an evaluator whose embedded kernel is backed by durable stores when provided. A Some store is attached and the kernel runs fail-closed against it. When a store is absent (or an attached one reports ephemeral), the kernel runs in-memory for that backend only when allow_ephemeral is set: durable-by-default, an operator must explicitly opt into losing receipts or revocation state on restart rather than getting it silently.

pub fn receipt_backend(&self) -> &'static str

Health label for the embedded kernel’s receipt backend.

pub fn revocation_backend(&self) -> &'static str

Health label for the embedded kernel’s revocation backend.

pub fn evaluate( &self, method: HttpMethod, path: &str, query: &HashMap<String, String>, headers: &HashMap<String, String>, body_hash: Option<String>, body_length: u64, ) -> Result<EvaluationResult, ProtectError>

Evaluate an incoming HTTP request against the route table.

pub fn evaluate_with_execution_nonce( &self, method: HttpMethod, path: &str, query: &HashMap<String, String>, headers: &HashMap<String, String>, body_hash: Option<String>, body_length: u64, execution_nonce: Option<&SignedExecutionNonce>, ) -> Result<EvaluationResult, ProtectError>

Evaluate an incoming HTTP request with an optional direct-proxy nonce.

pub fn evaluate_chio_request( &self, request: ChioHttpRequest, presented_capability: Option<&str>, ) -> Result<EvaluationResult, ProtectError>

Evaluate a fully normalized sidecar request.

impl RequestEvaluator

pub fn finalize_receipt( &self, decision_receipt: &HttpReceipt, response_status: u16, ) -> Result<HttpReceipt, ProtectError>