Struct HttpAuthority 

pub struct HttpAuthority { /* private fields */ }

Implementations

impl HttpAuthority

pub fn builder() -> HttpAuthorityBuilder

Start building an authority whose embedded kernel is backed by durable receipt and revocation stores. Stores must be attached before the kernel is wrapped in an Arc, which is what this builder does.

pub fn new(keypair: Keypair, policy_hash: String) -> Self

Fail-closed constructor: no receipt or revocation store is attached and both ephemeral opt-ins are off. Existing callers compile unchanged, but the first mediated call now denies with a durable-persistence error until a durable store is wired through HttpAuthority::builder. This matches the kernel-backed lanes, which already deny when durable persistence is missing.

pub fn new_ephemeral(keypair: Keypair, policy_hash: String) -> Self

Explicitly ephemeral constructor (in-memory receipt log and revocation store) for local scaffolds and tests that intend ephemerality.

pub fn new_with_approval_store( keypair: Keypair, policy_hash: String, approval_store: Arc<dyn ApprovalStore>, ) -> Self

Fail-closed constructor with a caller-provided approval store. Like HttpAuthority::new, no receipt or revocation store is attached and both ephemeral opt-ins stay off, so a mediated side-effect call denies with a durable-persistence error until durable stores are wired through HttpAuthority::builder. Reach for HttpAuthority::new_ephemeral_with_approval_store_and_trusted_issuers when in-memory receipts and revocations are intended.

pub fn new_with_approval_store_and_trusted_issuers( keypair: Keypair, policy_hash: String, approval_store: Arc<dyn ApprovalStore>, trusted_capability_issuers: Vec<PublicKey>, ) -> Self

Fail-closed constructor with a caller-provided approval store and trusted issuers. Side-effect calls deny until durable stores are attached; see HttpAuthority::new_with_approval_store.

pub fn new_ephemeral_with_approval_store_and_trusted_issuers( keypair: Keypair, policy_hash: String, approval_store: Arc<dyn ApprovalStore>, trusted_capability_issuers: Vec<PublicKey>, ) -> Self

Explicitly ephemeral constructor with a caller-provided approval store and trusted issuers: the embedded kernel keeps its receipt log and revocation state in memory, and both are lost on restart. Ephemerality is opted into through the constructor name (unlike the fail-closed HttpAuthority::new_with_approval_store_and_trusted_issuers) for local scaffolds and tests that intend it.

pub fn approval_store(&self) -> Arc<dyn ApprovalStore>

pub fn set_execution_nonce_store( &mut self, config: ExecutionNonceConfig, store: Box<dyn ExecutionNonceStore>, ) -> Result<(), HttpAuthorityError>

pub fn evaluate( &self, input: HttpAuthorityInput<'_>, ) -> Result<HttpAuthorityEvaluation, HttpAuthorityError>

pub fn prepare( &self, input: HttpAuthorityInput<'_>, ) -> Result<PreparedHttpEvaluation, HttpAuthorityError>

pub fn sign_decision_receipt( &self, prepared: &PreparedHttpEvaluation, ) -> Result<HttpReceipt, HttpAuthorityError>

pub fn finalize_receipt( &self, prepared: &PreparedHttpEvaluation, response_status: u16, decision_receipt_id: Option<&str>, ) -> Result<HttpReceipt, HttpAuthorityError>

pub fn sign_transport_deny_receipt( &self, input: TransportDenyInput<'_>, ) -> Result<HttpReceipt, HttpAuthorityError>

Sign a deny receipt for a request that was rejected before the kernel ever evaluated it (for example, an oversized HTTP body that the transport layer refused to buffer). The caller supplies the verdict and the surface-level identification fields directly because no kernel receipt id, content hash, or capability id exists yet. The receipt carries final HTTP status scope metadata so downstream auditors can distinguish it from in-band kernel decisions.

pub fn finalize_decision_receipt( &self, decision_receipt: &HttpReceipt, response_status: u16, ) -> Result<HttpReceipt, HttpAuthorityError>

Trait Implementations

impl Clone for HttpAuthority

fn clone(&self) -> HttpAuthority

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HttpAuthority

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.