Struct Gate 

pub struct Gate { /* private fields */ }

The Gate – Thunder Dome’s core proxy loop with full interceptor chain.

Interceptor order (inbound, client -> server):

1. Sentinel – authenticate on initialize, resolve identity
2. Throttle – check rate limits and budget
3. Ward – scan for injection patterns in tool arguments
4. Policy – evaluate authorization rules
5. Ledger – record the decision in the audit chain

Outbound (server -> client):

1. Schema Pin – verify tools/list responses for drift (block Critical/High)
2. Ward – scan outbound tool results for injection patterns
3. Ledger – record outbound audit entry

Implementations

impl Gate

pub fn new( config: GateConfig, authenticators: Vec<Box<dyn Authenticator>>, policy_engine: Option<SharedPolicyEngine>, rate_limiter_config: RateLimiterConfig, budget_config: BudgetTrackerConfig, ledger: Ledger, ) -> Self

Create a new Gate with full interceptor chain.

The policy_engine parameter accepts an optional SharedPolicyEngine (Arc<ArcSwap<PolicyEngine>>), which enables hot-reload. The gate reads the current policy atomically on every request via load(), so swaps performed by a [PolicyWatcher] are immediately visible without restart.

pub fn transparent(ledger: Ledger) -> Self

Create a transparent pass-through Gate (no security enforcement).

pub async fn run_stdio( self, command: &str, args: &[&str], ) -> Result<(), DomeError>

Run the proxy over stdio (stdin/stdout for the client, child process for the server).

Trait Implementations

impl Debug for Gate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.