Struct InMemoryApprovalStore 

pub struct InMemoryApprovalStore { /* private fields */ }

Thread-safe in-memory ApprovalStore. Useful for tests and for ephemeral deployments where operators explicitly accept data loss on restart (ephemeral: data is lost on restart; use the SQLite-backed store for production durability).

Implementations

impl InMemoryApprovalStore

pub fn new() -> Self

Trait Implementations

impl ApprovalStore for InMemoryApprovalStore

fn store_pending( &self, request: &ApprovalRequest, ) -> Result<(), ApprovalStoreError>

Persist a new pending request. Idempotent on approval_id: a second call with the same id returns without error as long as the stored payload matches.

fn get_pending( &self, id: &str, ) -> Result<Option<ApprovalRequest>, ApprovalStoreError>

Fetch a single pending approval by id.

fn list_pending( &self, filter: &ApprovalFilter, ) -> Result<Vec<ApprovalRequest>, ApprovalStoreError>

List all pending approvals matching the filter.

fn resolve( &self, id: &str, decision: &ApprovalDecision, ) -> Result<(), ApprovalStoreError>

Mark a pending approval as resolved. Returns ApprovalStoreError::AlreadyResolved if the request has already been resolved (double-resolve protection) and ApprovalStoreError::Replay if the bound token has already been consumed on a different request.

fn count_approved( &self, subject_id: &str, policy_id: &str, ) -> Result<u64, ApprovalStoreError>

Count approved calls for a given subject / grant pair. Used by Constraint::RequireApprovalAbove threshold accounting.

fn record_consumed( &self, token_id: &str, parameter_hash: &str, now: u64, ) -> Result<(), ApprovalStoreError>

Record that a token (by token_id and parameter_hash) has been consumed. Used to reject replays of the same approval token across a restart. Implementations may also call this from [resolve]; exposing it on the trait lets the kernel do the replay check before persisting the resolution, which matters when the store is backed by SQLite and wants to run the check inside the transaction.

fn is_consumed( &self, token_id: &str, parameter_hash: &str, ) -> Result<bool, ApprovalStoreError>

Returns true if the token has already been consumed.

fn get_resolution( &self, id: &str, ) -> Result<Option<ResolvedApproval>, ApprovalStoreError>

Fetch the resolution record for a previously resolved approval.

impl Default for InMemoryApprovalStore

fn default() -> InMemoryApprovalStore

Returns the “default value” for a type.