Struct ProcessCache 

pub struct ProcessCache { /* private fields */ }

In-process moka-backed cache of Arc<SecretString>.

Constructed via ProcessCache::new, which requires a HardeningToken. Cache operations are sync (no async runtime involvement); moka’s eviction listener fires synchronously on Drop in the sync flavor, so the Arc<SecretString> zeroize-on-Drop semantics are preserved for evicted entries.

Implementations

impl ProcessCache

pub fn new( policy: &CachePolicy, _token: HardeningToken, audit_sink: Option<Arc<dyn AuditSink>>, ) -> Option<Self>

Construct a cache governed by policy. Returns None when the policy is Disabled.

The _token parameter is the architectural lever: callers who have not installed hardening cannot obtain a token and therefore cannot construct a cache. The token is consumed by value (it is Copy) and is not retained.

audit_sink, when provided, receives cache.expire events on TTL-driven evictions. Explicit invalidate / invalidate_all calls do not emit events here — Store emits its own cache.clear on the user-facing path.

pub fn get(&self, key: &CacheKey) -> Option<Arc<SecretString>>

Read a cached value. Returns the Arc<SecretString> if a fresh entry exists, or None on miss / TTL expiry. Callers hold the clone — the cache retains its own Arc.

pub fn insert(&self, key: CacheKey, value: Arc<SecretString>)

Insert or replace a value.

pub fn invalidate(&self, key: &CacheKey)

Invalidate a single entry. No-op if the key is absent.

pub fn invalidate_all(&self)

Drop every entry. Used by hasp cache clear and tests.

pub fn run_pending_tasks(&self)

Synchronously run pending eviction listeners. Used by tests to observe deterministic eviction behavior — production callers do not need to invoke this.

pub fn entry_count(&self) -> u64

Approximate entry count after pending tasks are processed. Useful for tests and --explain diagnostics; not authoritative under concurrent insertion.

Trait Implementations

impl Clone for ProcessCache

fn clone(&self) -> ProcessCache

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProcessCache

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.